CVE-2020-35173

CRÍTICO 9.8CVE-2020-35173 · Published 30/12/2020 · updated 17/06/2026

En resumen

CVE-2020-35173 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a amaze file manager (amaze file manager project).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.7%, mayor que el 77.9% de las vulnerabilidades.
Solución: actualizar a 3.4.2 o posterior.

Package	Affected versions	Patched versions
amaze file manager amaze_file_manager_project	`< 3.4.2`	`3.4.2`

Description

The Amaze File Manager application before 3.4.2 for Android does not properly restrict intents for controlling the FTP server (aka services.ftpservice.FTPReceiver.ACTION_START_FTPSERVER and services.ftpservice.FTPReceiver.ACTION_STOP_FTPSERVER).

References

TeamAmaze/AmazeFileManager · Patch
TeamAmaze/AmazeFileManager#1815 · Third Party Advisory
play.google.com/store/apps/details · Product

Más vulnerabilidades de amaze file manager

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free