critical9.8
CVE-2020-35173
The Amaze File Manager application before 3.4.2 for Android does not properly restrict intents for controlling the FTP server (aka services.ftpservice.FTPRecei…
Impact
The Amaze File Manager application before 3.4.2 for Android does not properly restrict intents for controlling the FTP server (aka services.ftpservice.FTPReceiver.ACTION_START_FTPSERVER and services.ftpservice.FTPReceiver.ACTION_STOP_FTPSERVER).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amaze File Manager Project | Amaze File Manager | before 3.4.2 |
References
- NVD record
- CVE.org record
- https://github.com/TeamAmaze/AmazeFileManager/compare/v3.4.1...v3.4.2
- https://github.com/TeamAmaze/AmazeFileManager/pull/1815
- https://play.google.com/store/apps/details?id=com.amaze.filemanager&hl=en_US&gl=US
- https://github.com/TeamAmaze/AmazeFileManager/compare/v3.4.1...v3.4.2
- https://github.com/TeamAmaze/AmazeFileManager/pull/1815
- https://play.google.com/store/apps/details?id=com.amaze.filemanager&hl=en_US&gl=US