CVE-2020-12483CWE-601

AppStore Remote Download and Installation Vulnerability

High · published March 23, 2021

CVSS v3.1
8.2
EPSS
1%
Percentile
52.7
In the wild
Unconfirmed
What it is

The appstore before 8.12.0.0 exposes some of its components, and the attacker can cause remote download and install apps through carefully constructed parameters.

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00701 · 52.7th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2021-03-23T16:15Z
EPSS history
Timeline
  • 23 MAR 16:15Z
    AppStore Remote Download and Installation Vulnerability
    cvelistv5