Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-24948 EUVD-2025-10985GHSA-q26c-m38m-777f

In JotUrl 2.0, passwords are sent via HTTP GET-type requests, potentially exposing credentials to eavesdropping or insecure records.

Published Apr 15, 2025 · Updated Apr 15, 2025 · Assigned by mitre