CVE-2025-41113
04.11.2025, 13:15
A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through theparameter 'id_denuncia' in '/backend/api/buscarDenunciaByPin.php'.Enginsight
| Vendor | Product | Version |
|---|---|---|
| canaldenuncia | canaldenuncia.app | 𝑥 < 4.4.8 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration