Skip to content
OpenAdvisories
Medium · 4.3 CVE-2025-44017 EUVD-2025-26374GHSA-7mg9-59vm-xq2p

"Gunosy" App contains a vulnerability where sensitive information may be included in the application's outbound communication. If a user ac…

Published Sep 2, 2025 · Updated Sep 2, 2025 · Assigned by jpcert

Vendor: Gunosy Product: "Gunosy" App for Android Product: "Gunosy" App for iOS Platform: Android Platform: iOS

Description

"Gunosy" App contains a vulnerability where sensitive information may be included in the application's outbound communication. If a user accesses a crafted URL, an attacker may obtain the JWT (JSON Web Token).

Affected products

VendorProductAffectedFixed
Gunosy "Gunosy" App for Android versions prior to 7.34.0 —
Gunosy "Gunosy" App for iOS versions prior to 7.34.0 —

References