CVE-2023-1384 | BDVDB-2026-201415 Detail
AmazonFire TV Stick 3rd gen
Description#
The setMediaSource function on the amzn.thin.pl service does not sanitize the "source" parameter allowing for arbitrary javascript code to be run This issue affects: Amazon Fire TV Stick 3rd gen versions prior to 6.2.9.5. Insignia TV with FireOS versions prior to 7.6.3.3.
Impact#
CAPEC-63 Cross-Site Scripting (XSS)
Weaknesses#
- CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.