CVE-2020-14130 - Some js interfaces in the Xiaomi community were exposed, causing sensitive functions to be maliciously called on Xiaomi community app Affected Version <3.0.210809

Back Back to CVE browser

MEDIUM

Some js interfaces in the Xiaomi community were exposed, causing sensitive functions to be maliciously called on Xiaomi community app Affected Version <3.0.210809

Published Sep 16, 2021

5.3

MEDIUM

CVSS 3.1

EPSS 0.71%

Description

Some js interfaces in the Xiaomi community were exposed, causing sensitive functions to be maliciously called on Xiaomi community app Affected Version <3.0.210809

Affected products

Vendor n/a Product Xiaomi community app Default
unknown
Affected
- Xiaomi community app Affected Version < 3.0.210809

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
n/a	Xiaomi community app	unknown	Affected Xiaomi community app Affected Version < 3.0.210809

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-668

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-6289
Advisory
https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=25&locale=zh
x_refsource_MISCBroken LinkVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-6289		Advisory
https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=25&locale=zh		x_refsource_MISCBroken LinkVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Xiaomi

Published Sep 16, 2021

Updated Aug 4, 2024

Reserved Jun 15, 2020

Link CVE-2020-14130

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-14130

Red Hat

No data

ENISA EUVD

Assigner Xiaomi

Published Sep 16, 2021

Updated Aug 4, 2024

Link EUVD-2020-6289

GitHub

No data