CVE-2020-35173

—

CVSS 3.1

9.8 critical

EPSS

2%p76

Published

Dec 30, 2020 (Dec 30, 2020)

Modified

Jun 17, 2026

Description

The Amaze File Manager application before 3.4.2 for Android does not properly restrict intents for controlling the FTP server (aka services.ftpservice.FTPReceiver.ACTION_START_FTPSERVER and services.ftpservice.FTPReceiver.ACTION_STOP_FTPSERVER).

Vendors: amaze file manager project
Products: amaze file manager
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.7%)

In the news0 stories

No ingested article mentions this CVE yet.