Xiaomi File Manager App Vulnerable to Path Traversal Attacks

CVE-2023-26321

What is CVE-2023-26321?

A path traversal vulnerability has been identified in the Xiaomi File Manager application. This security flaw occurs due to the presence of unfiltered special characters, which can be manipulated by attackers to gain unauthorized access. By exploiting this vulnerability, attackers could potentially overwrite files and execute arbitrary code, posing significant risks to users of the application. It is essential for users to remain vigilant and apply necessary security updates to mitigate potential threats associated with this vulnerability.

References