CVE-2025-44017 — Gunosy Inc. / "Gunosy" App for Android

CVE-2025-44017

Gunosy Inc. / "Gunosy" App for Android PUBLISHED

Description (CNA)

"Gunosy" App contains a vulnerability where sensitive information may be included in the application's outbound communication. If a user accesses a crafted URL, an attacker may obtain the JWT (JSON Web Token).

Affected (CNA)

Vendor / product	Versions
Gunosy Inc. / "Gunosy" App for Android	affected versions prior to 7.34.0
Gunosy Inc. / "Gunosy" App for iOS	affected versions prior to 7.34.0

CWE

CWE-201

References

https://jvn.jp/en/jp/JVN47404248/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.