VulnerabilityModified
CVE-2020-14118
An intent redirection vulnerability in the Mi App Store product.
MEDIUM 6.1EPSS 0.56%
Does this matter?
Lower severity and a low EPSS score (0.56%). Track it; it rarely justifies an emergency change on its own.
Description
An intent redirection vulnerability in the Mi App Store product. This vulnerability is caused by the Mi App Store does not verify the validity of the incoming data, can cause the app store to automatically download and install apps.
- CVSS 3.1
- 6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- EPSS
- 0.56% probability · 45th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-601
- Affected
- mi/mi app store
- Source
- security@xiaomi.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.