Gunosy App Sensitive Information Disclosure Vulnerability

A vulnerability exists in the Gunosy App for Android and iOS, both prior to version 7.34.0, allowing sensitive information to be unintentionally included in outgoing communications. This issue arises when a user accesses a specially crafted URL, potentially enabling an attacker to intercept the JSON Web Token (JWT) from the app's data transmission.

Impact

Exploitation of this vulnerability could lead to unauthorized access to the user's JSON Web Token (JWT), which may be used to authenticate requests or access resources on behalf of the user.

Remediation

Users are advised to update the Gunosy App to the latest version available.