PT-2025-16357 · Joturl · Joturl

CVE-2025-24948 · Publicado 2025-04-15 · Atualizado 2025-04-22

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions JotUrl version 2.0

Description The issue involves passwords being sent via HTTP GET-type requests, potentially exposing credentials to eavesdropping or insecure records.

Recommendations For JotUrl version 2.0, consider disabling the use of HTTP GET-type requests for password transmission until a secure method is implemented. Restrict access to sensitive areas of the application to minimize the risk of exploitation. Avoid using insecure protocols for transmitting sensitive information.

Correção

Enumeração de Fraquezas

CWE-598

Identificadores relacionados

CVE-2025-24948

Produtos afetados

Joturl

Referências · 7

• https://t.me/cvedetector/22964 · Publicação no Telegram
• https://gruppotim.it/it/footer/red-team.html · Nota
• https://t.me/cvenotify/119431 · Publicação no Telegram
• https://t.me/cvetracker/21649 · Publicação no Telegram
• https://twitter.com/CVEnew/status/1912171820658381092 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-24948 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2025-24948 · Aviso do Fabricante