Lucene search

MitreCVE-2023-43481

HistoryDec 27, 2023 - 9:15 p.m.

CVE-2023-43481

2023-12-2721:15:07

CWE-94

mitre

web.nvd.nist.gov

cve

shenzhen tcl browser

web browsehere

remote attacker

arbitrary code

execute

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.4

Confidence

High

EPSS

0.003

Percentile

71.0%

JSON

An issue in Shenzhen TCL Browser TV Web BrowseHere (aka com.tcl.browser) 6.65.022_dab24cc6_231221_gp allows a remote attacker to execute arbitrary JavaScript code via the com.tcl.browser.portal.browse.activity.BrowsePageActivity component.

Affected configurations

Nvd

Node

tclbrowser_tv_web_-_browsehereMatch6.65.022_dab24cc6_231221_gpandroid

VendorProductVersionCPE
tclbrowser_tv_web_-_browsehere6.65.022_dab24cc6_231221_gpcpe:2.3:a:tcl:browser_tv_web_-_browsehere:6.65.022_dab24cc6_231221_gp:*:*:*:*:android:*:*

Vendor	Product	Version	CPE
tcl	browser_tv_web_-_browsehere	6.65.022_dab24cc6_231221_gp	cpe:2.3:a:tcl:browser_tv_web_-_browsehere:6.65.022_dab24cc6_231221_gp:::::android::

References

github.com/actuator/com.tcl.browser/blob/main/CWE-94.md

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.4

Confidence

High

EPSS

0.003

Percentile

71.0%

JSON

Related for CVE-2023-43481