CVE-2023-43955
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2023-43955
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-43955.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2023-43955
- Published
- 2023-12-27T21:15:08Z
- Modified
- 2025-01-08T09:39:46.966521Z
- Severity
-
- 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
The com.phlox.tvwebbrowser TV Bro application through 2.0.0 for Android mishandles external intents through WebView. This allows attackers to execute arbitrary code, create arbitrary files. and perform arbitrary downloads via JavaScript that uses takeBlobDownloadData.
- References
Affected packages
Git / github.com/truefedex/tv-bro
Affected ranges
- Type
- GIT
- Repo
- https://github.com/truefedex/tv-bro
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast affected
Affected versions
Other
latest_webview
v1.*
v1.3.0-alpha
v1.4.1
v1.4.2
v1.4.3
v1.4.4
v1.4.5
v1.5.0-alpha
v1.5.1-beta
v1.5.2-beta
v1.5.3-beta
v1.5.4-beta
v1.5.5
v1.5.5-beta
v1.5.6
v1.5.7
v1.5.8
v1.6.0
v1.6.0-alpha2
v1.6.1
v1.6.2
v1.7.0
v1.7.1
v1.7.2
v1.8.0
v1.8.1
v1.8.2
v1.8.3
v1.8.4
v1.8.5
v1.8.6
v2.*
v2.0.0
v2.0.0-alpha
v2.0.0-rc1