Code injection

2022-04-2118:15:00

PRIOn knowledge base

www.prio-n.com

5.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

A business logic vulnerability exists in Mi App Store. The vulnerability is caused by incomplete permission checks of the products being bypassed, and an attacker can exploit the vulnerability to perform a local silent installation.

CPENameOperatorVersion
mi_app_storeeq4.12.2

CPE	Name	Operator	Version
	mi_app_store	eq	4.12.2

References

trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=146