What is CVE-2020-14118?

CVE-2020-14118 is a medium-severity vulnerability in Mi App Store, classified under URL Redirection to Untrusted Site (Open Redirect). CVSS score: 6.1/10. Published 2022-04-21.

How severe is CVE-2020-14118?

Medium severity. CVSS v3 base score is 6.1 out of 10.

Open Redirect in Mi App Store

CVE-2020-14118

An intent redirection vulnerability in the Mi App Store product. This vulnerability is caused by the Mi App Store does not verify the validity of the incoming data, can cause the app store to automatically download and install apps.

Vulnerability class: Open Redirect

EPSS: 0.005 (42.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.

Affected products

Mi Mi_app_store
N/a Mi App Store — versions Mi App Store version <4.10.0

Weakness classification (CWE)

CWE-601 — URL Redirection to Untrusted Site (Open Redirect)

References

security@xiaomi.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-14118?: CVE-2020-14118 is a medium-severity vulnerability in Mi App Store, classified under URL Redirection to Untrusted Site (Open Redirect). CVSS score: 6.1/10. Published 2022-04-21.
How severe is CVE-2020-14118?: Medium severity. CVSS v3 base score is 6.1 out of 10.