| Package | Affected versions | Patched versions |
|---|---|---|
| zalora | = 6.15.1 |
The Zalora application 6.15.1 for Android stores confidential information insecurely on the system (i.e. plain text), which allows a non-root user to find out the username/password of a valid user via /data/data/com.zalora.android/shared_prefs/login_data.xml.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free