CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.3. It affects Android. Public exploit code or proof-of-concept references have been detected in its references. Its EPSS score suggests a 10.0% probability of exploitation in the next 30 days.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Xiaomi Stock Browser 10.2.4.g on Xiaomi Redmi Note 5 Pro devices and other Redmi Android phones allows content provider injection. In other words, a third-party application can read the user's cleartext browser history via an app.provider.query content://com.android.browser.searchhistory/searchhistory request.
Related CVEs
Other vulnerabilities affecting the same vendor(s)