KHealth: Information disclouser from URL parameter "access" lead to Account Takeover

The vulnerability allowed an attacker to retrieve sensitive JWT tokens from URL parameters, leading to potential account takeover. The JWT tokens were found using web crawling tools and could be used to authenticate as other users...