Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2025-44017

"Gunosy" App contains a vulnerability where sensitive information may be included in the application's outbound communication. If a user accesses a crafted URL, an attacker may obt

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
jpcert

Description

"Gunosy" App contains a vulnerability where sensitive information may be included in the application's outbound communication. If a user accesses a crafted URL, an attacker may obtain the JWT (JSON Web Token).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Gunosy Inc. "Gunosy" App for Android

  • versions prior to 7.34.0affected

Gunosy Inc. "Gunosy" App for iOS

  • versions prior to 7.34.0affected

References