CVE Vulnerabilities

CVE-2021-41719

Use of GET Request Method With Sensitive Query Strings

Published: Mar 04, 2025 | Modified: Mar 21, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Maharashtra State Electricity Distribution Company Limited Mahavitran IOS Application 16.1 application till version 16.1 communicates using the GET method to process requests that contain sensitive information such as user account name and password, which can expose that information through the browsers history, referrers, web logs, and other sources.

Weakness

The web application uses the HTTP GET method to process a request and includes sensitive information in the query string of that request.

Potential Mitigations

References