Medium severity4.3NVD Advisory· Published May 3, 2023· Updated Jun 17, 2026

CVE-2023-1384

Description

The setMediaSource function on the amzn.thin.pl service does not sanitize the "source" parameter allowing for arbitrary javascript code to be run

This issue affects:

Amazon Fire TV Stick 3rd gen versions prior to 6.2.9.5. Insignia TV with FireOS versions prior to 7.6.3.3.

LLM-synthesized narrative grounded in this CVE's description and references.

Amazon/Fire OS
cpe:2.3:o:amazon:fire_os:*:*:*:*:*:*:*:*
Range: <6.2.9.5
Insignia/TV with FireOSllm-create2 versions
<7.6.3.3+ 1 more
- (no CPE)range: <7.6.3.3
- (no CPE)range: 7.6.3.2
Amazon/Fire TV Stick 3rd genllm-fuzzy2 versions
<6.2.9.5+ 1 more
- (no CPE)range: <6.2.9.5
- (no CPE)range: 6.2.9.4

No linked articles in our index yet.