medium6.5
CVE-2025-24948
In JotUrl 2.0, passwords are sent via HTTP GET-type requests, potentially exposing credentials to eavesdropping or insecure records.
Impact
In JotUrl 2.0, passwords are sent via HTTP GET-type requests, potentially exposing credentials to eavesdropping or insecure records.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Joturl | Joturl | Version 2.0 |