Skip to content
OpenAdvisories
Medium · 6.3 CVE-2023-26321 EUVD-2023-30142GHSA-gmjg-rc78-3h37

The international version of Xiaomi File Manager has a path traversal vulnerability

Published Aug 28, 2024 · Updated Mar 25, 2025 · Assigned by Xiaomi

Description

A path traversal vulnerability exists in the Xiaomi File Manager application product(international version). The vulnerability is caused by unfiltered special characters and can be exploited by attackers to overwrite and execute code in the file.

Affected products

VendorProductAffectedFixed
Xiaomi Xiaomi File Manager App International Version Xiaomi File Manager App International Version – ≤ V1-210567 —

References