An intent redirection vulnerability in the Mi Browser product. This vulnerability is caused by the Mi Browser does not verify the validity of the incoming data. Attackers can perform sensitive operations by exploiting this.
oryginał ENCVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NMi Browser
APPMi< 15.8.0
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
CWE
Powiązane podatności
CVE-2019-13321HIGH8.0ten sam produkt
This vulnerability allows network adjacent attackers to execute arbitrary code on affected installations of Xi...
CVE-2019-13322HIGH8.8ten sam produkt
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Xiaomi Bro...
CVE-2019-10875MEDIUM6.5ten sam produkt
A URL spoofing vulnerability was found in all international versions of Xiaomi Mi browser 10.5.6-g (aka the MI...
CVE-2024-4405CRITICAL9.6PL ✓ten sam vendor
XSS umożliwiający RCE w Xiaomi 13 Pro — plik manual-upgrade.html
CVE-2024-4406CRITICAL9.6PL ✓ten sam vendor
XSS umożliwiający RCE w aplikacji GetApps na Xiaomi 13 Pro