| Package | Affected versions | Patched versions |
|---|---|---|
| xtool anyscan | ≤ 4.40.40 |
Xtooltech Xtool AnyScan Android Application 4.40.40 is Missing Authentication for Critical Function. The server-side endpoint responsible for serving update packages for the application does not require any authentication. This allows an unauthenticated remote attacker to freely download official update packages..
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free