Approved changes feed: RSS · Atom

cpe:2.3:a:mi:xiaomi_cloud:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMi (60a5be67-ae7d-588b-8dcf-30a3da19041f)
ProductXiaomi Cloud (06a288b5-98e4-5ef0-9d3c-3fffcab32c8d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-26316 vulnerable 2026-06-08 05:57:39.391075 Details available
A XSS vulnerability exists in the Xiaomi cloud service Application product. The vulnerability is caused by Webview's whitelist checking function allowing javascript protocol to be loaded and can be exploited by attackers to steal Xiaomi cloud service account's cookies.
Published: 2023-08-02T00:00:00.000Z
Updated: 2024-09-27T21:58:10.819Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.