JXcore JXM Improper Certificate Validation Vulnerability

A vulnerability exists in JXcore JXM master branch, where the application improperly validates TLS/SSL certificates. This issue arises because 'rejectUnauthorized' is set to false in HTTPS request options when 'jx_obj.IsSecure' is true. As a result, man-in-the-middle attackers could potentially spoof servers and intercept sensitive data.

Impact

Exploitation of this vulnerability allows for man-in-the-middle attacks, where an attacker can intercept and manipulate communications between the client and server, potentially leading to the exposure of sensitive information.