CVE-2020-35173

CRITICO 9.8CVE-2020-35173 · Published 30/12/2020 · updated 17/06/2026

In breve

CVE-2020-35173 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda amaze file manager (amaze file manager project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.7%, superiore al 77.8% delle vulnerabilità.
Correzione: aggiornare a 3.4.2 o successiva.

Package	Affected versions	Patched versions
amaze file manager amaze_file_manager_project	`< 3.4.2`	`3.4.2`

Description

The Amaze File Manager application before 3.4.2 for Android does not properly restrict intents for controlling the FTP server (aka services.ftpservice.FTPReceiver.ACTION_START_FTPSERVER and services.ftpservice.FTPReceiver.ACTION_STOP_FTPSERVER).

References

TeamAmaze/AmazeFileManager · Patch
TeamAmaze/AmazeFileManager#1815 · Third Party Advisory
play.google.com/store/apps/details · Product

Altre vulnerabilità di amaze file manager

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free