CVE-2020-35173

2020-12-3020:15:15

Google

osv.dev

7.2 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

60.2%

JSON

The Amaze File Manager application before 3.4.2 for Android does not properly restrict intents for controlling the FTP server (aka services.ftpservice.FTPReceiver.ACTION_START_FTPSERVER and services.ftpservice.FTPReceiver.ACTION_STOP_FTPSERVER).

CPENameOperatorVersion
amazefilemanagereq2.0
amazefilemanagereq.3.1.2-rc3
amazefilemanagereq3.4.1
amazefilemanagereq.3.1.2-rc4
amazefilemanagereq.3.1.2-beta.8
amazefilemanagereq1.4
amazefilemanagereq.3.1.2-rc2
amazefilemanagereq3.1.1
amazefilemanagereq2.0.5
amazefilemanagereq3.1.0-beta.1

Name	Operator	Version
amazefilemanager	eq	2.0
amazefilemanager	eq	.3.1.2-rc3
amazefilemanager	eq	3.4.1
amazefilemanager	eq	.3.1.2-rc4
amazefilemanager	eq	.3.1.2-beta.8
amazefilemanager	eq	1.4
amazefilemanager	eq	.3.1.2-rc2
amazefilemanager	eq	3.1.1
amazefilemanager	eq	2.0.5
amazefilemanager	eq	3.1.0-beta.1