The setMediaSource function on the... CVE-2023-1384
-
AV
AC
AU
C
I
A
发布：
2023-05-03
修订：
2023-05-12
The setMediaSource function on the amzn.thin.pl service does not sanitize the "source" parameter allowing for arbitrary javascript code to be run This issue affects: Amazon Fire TV Stick 3rd gen versions prior to 6.2.9.5. Insignia TV with FireOS versions prior to 7.6.3.3.
漏洞利用/PoC
暂无可用Exp或PoC
受影响的平台与产品
当前有3条受影响产品信息
