TI-2020-11056 CVE-2020-14116 · GHSA-mx3j-v3jg-vhf7
Insufficient verification of data authenticity in Mi Browser
Priority LOW 33
An intent redirection vulnerability in the Mi Browser product.
4 records
An intent redirection vulnerability in the Mi Browser product.
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Xiaomi Browser Prior to 10.4.0.
This vulnerability allows network adjacent attackers to execute arbitrary code on affected installations of Xiaomi Browser Prior to 10.4.0.
A URL spoofing vulnerability was found in all international versions of Xiaomi Mi browser 10.5.6-g (aka the MIUI native browser) and Mint Browser 1.5.3 due to the way they handle the "q" query parameter.