CVE-2025-62317
Low · 2.6CVSS
2.6
EPSS
0.1%
Published
May 14, 2026
CISA due date
—
The record
HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters. Passing sensitive data in URLs may expose it through browser history, logs, or intermediary systems, potentially leading to unintended information disclosure under certain conditions.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-61614 SolidInvoice is an open-source invoicing platform. CWE-598
- CVE-2026-82181 Medical Practice Management System developed by Le-yan has a Sensitive Data in URL… CWE-598
- CVE-2026-76179 An improper protection of authentication tokens vulnerability exists in certain Ebyte… CWE-598
- CVE-2026-63408 Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your… CWE-598
- CVE-2026-66832 When the Mira Android app opens in-app WebView content (e.g., shop redirect flows), the… CWE-598
- CVE-2026-14838 Use of GET request method with sensitive query strings vulnerability in Bilin Software… CWE-598
- CVE-2026-54652 Frigate is an open source network video recorder. CWE-598
- CVE-2026-58656 Grav API plugin before v1.0.0-rc.16 accepts JWT tokens via the ?token= URL query… CWE-598