CVE-2025-24949: In JotUrl 2.0, is possible to bypass security requirements during the password change process.
Description
In JotUrl 2.0, is possible to bypass security requirements during the password change process.
Classification
CVE ID: CVE-2025-24949
Affected Products
Vendor: n/a
Product: n/a
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 11.18% (scored less or equal to compared to others)
EPSS Date: 2025-04-21 (when was this score calculated)
References
https://nvd.nist.gov/vuln/detail/CVE-2025-24949https://www.gruppotim.it/it/footer/red-team.html