JVN#77386811: Explorer+ File Manager vulnerable to directory traversal

Explorer+ File Manager provided by Droidware UK contains an issue in processing file names, which may result in a directory traversal (CWE-22) vulnerability.

Impact

A remote, unauthenticated attacker may create an arbitrary file or overwrite an existing file in a directory that the application has privileges to access.

Solution

Apply an Update
Apply the appropriate update according to the information provided by the developer.

Products Affected

• Explorer+ File Manager versions prior to 2.3.3
• Explorer+ File Manager Pro versions prior to 2.3.3