CVE-2023-26321

The international version of Xiaomi File Manager has a path traversal vulnerability

State: Published
Severity: 6.3 Medium
Published: Aug 28, 2024
Updated: Mar 25, 2025
Reserved: Feb 22, 2023

Description

A path traversal vulnerability exists in the Xiaomi File Manager application product(international version). The vulnerability is caused by unfiltered special characters and can be exploited by attackers to overwrite and execute code in the file.

Scores

CVSS	Score	Vector	Source
3.1	6.3 Medium	CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H	Xiaomi

Weaknesses

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected Products

Product	Versions
Xiaomi File Manager App International VersionXiaomi	Xiaomi File Manager App International Version through V1-210567Affectedfrom V1-210586Not affected

References

https://trust.mi.com/misrc/bulletins/advisory?cveId=541

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.