CVE-2023-26321 MEDIUM

CVE-2023-26321: The international version of Xiaomi File Manager has a path traversal vulnerability

Vendor Xiaomi
Product Xiaomi File Manager App International Version
Published August 28, 2024
Last update March 25, 2025
View on NVD All CVEs

CVSS base score

6.3/10
Attack vector Physical
Attack complexity High
Privileges required None
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

A path traversal vulnerability exists in the Xiaomi File Manager application product(international version). The vulnerability is caused by unfiltered special characters and can be exploited by attackers to overwrite and execute code in the file.

Key dates

02Disclosure timeline

August 28, 2024 CVE published
March 25, 2025 Record updated