CVE-2025-44017

MEDIUM

Gunosy App - Info Disclosure

Title source: llm

Description

"Gunosy" App contains a vulnerability where sensitive information may be included in the application's outbound communication. If a user accesses a crafted URL, an attacker may obtain the JWT (JSON Web Token).

References (1)

[Third Party Advisory] https://jvn.jp/en/jp/JVN47404248/

Scores

CVSS v3 4.3

EPSS 0.0003

EPSS Percentile 8.2%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Classification

CWE

CWE-201

Status draft

Timeline

Published Sep 02, 2025

Tracked Since Feb 18, 2026