CVEvulnerability
CVE-2020-14118
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2022-04-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-601
Description
An intent redirection vulnerability in the Mi App Store product. This vulnerability is caused by the Mi App Store does not verify the validity of the incoming data, can cause the app store to automatically download and install apps.
Affected configurations
• mi mi app store (< 4.10.0)
Related
Weakness · CWE (1)
- CWE-601 URL Redirection to Untrusted Site weakness
References
- https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=144 Vendor Advisory
- https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=144 Vendor Advisory