CVEvulnerability
CVE-2020-14116
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-04-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-345
Description
An intent redirection vulnerability in the Mi Browser product. This vulnerability is caused by the Mi Browser does not verify the validity of the incoming data. Attackers can perform sensitive operations by exploiting this.
Affected configurations
• mi mi browser (< 15.8.0)
Related
Weakness · CWE (1)
- CWE-345 Insufficient Verification of Data Authenticity weakness
References
- https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=148 Vendor Advisory
- https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=148 Vendor Advisory