CVE-2019-11383: Wifi FTP Server Project Wifi FTP Server

Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days.

An issue was discovered in the Medha WiFi FTP Server application 1.8.3 for Android. An attacker can read the username/password of a valid user via /data/data/com.medhaapps.wififtpserver/shared_prefs/com.medhaapps.wififtpserver_preferences.xml

Affected products

• Wifi FTP Server Project Wifi FTP Server: version 1.8.3 only

Published 2019-04-22. Last modified 2026-06-17.