description: A business logic vulnerability exists in Mi App Store. The vulnerability is caused by incomplete permission checks of the products being bypassed, and an attacker can exploit the vulnerability to perform a local silent installation.
problem types: Business logic vulnerability
affected:
{
product: Mi App Store
vendor: n/a
versions:
status: affected, version: Mi App Store version 4.12.2
}