CVE-2025-70045

The jxm messaging backend (specifically jxcore jxm master ) is vulnerable to Improper Certificate Validation (CWE-295). The application incorrectly sets 'rejectUnauthorized': false in HTTPS request options when jx_obj.IsSecure is true. This flaw allows an attacker to perform a man-in-the-middle a...