CVE-2020-12483

  • Last update: Apr 13, 2023

Description

The appstore before 8.12.0.0 exposes some of its components, and the attacker can cause remote download and install apps through carefully constructed parameters.

Software From Fixed in
vivo / appstore - 8.12.0.0

Details

    • Severity: Medium
  • CVE: CVE-2020-12483
  • Published: Mar 23, 2021
  • Updated: Apr 13, 2023
  • Exploit:

CVSS v3

  • Severity: Medium
  • Score: 6.1
  • AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CVSS v2

  • Severity: Medium
  • Score: 5.8
  • AV:N/AC:M/Au:N/C:P/I:P/A:N

CWEs