Search vulnerabilities

Results 2

CVE-2025-24949

In JotUrl 2.0, is possible to bypass security requirements during the password change process.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2025-24948

In JotUrl 2.0, passwords are sent via HTTP GET-type requests, potentially exposing credentials to eavesdropping or insecure records.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products