CVE-2023-26321 — The international version of Xiaomi File Manager has a path traversal vulnerability

CVE-2023-26321

The international version of Xiaomi File Manager has a path traversal vulnerability PUBLISHED

Description (CNA)

A path traversal vulnerability exists in the Xiaomi File Manager application product(international version). The vulnerability is caused by unfiltered special characters and can be exploited by attackers to overwrite and execute code in the file.

Affected (CNA)

Vendor / product	Versions
Xiaomi / Xiaomi File Manager App International Version	affected Xiaomi File Manager App International Version through V1-210567

CWE

No CWE identifiers supplied.

References

https://trust.mi.com/misrc/bulletins/advisory?cveId=541

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.