The appstore before 8.12.0.0 exposes some of its components, and the attacker can cause remote download and install apps through carefully constructed parameters.
CVSS 3.1HIGH 8.2·Network·No auth·User interaction·EPSS 0.00701·Published 2021-03-23·Fixed in 8.12.0.0CWE-601