fofolee uTools-quickcommand Improper Certificate Validation Vulnerability
Vulnerability
A vulnerability exists in fofolee uTools-quickcommand version 5.0.3 due to improper validation of TLS/SSL certificates. The application disables certificate validation in the HTTPS agent configuration for Axios, allowing man-in-the-middle attackers to spoof servers and intercept sensitive data.
Impact
Exploitation of this vulnerability could lead to man-in-the-middle attacks, where an attacker could intercept and potentially alter communications between the user and a server.
Added: Feb 23, 2026, 4:35 PM
Updated: Feb 23, 2026, 6:24 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
5.0exploitability
4.1remediation
0.0relevance
3.1threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.