CVE-2025-41340
04.11.2025, 14:15
A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through theparameters 'id_tp_denuncia' and 'id_sociedad' in '/backend/api/buscarTipoDenunciabyId.php'.Enginsight
| Vendor | Product | Version |
|---|---|---|
| canaldenuncia | canaldenuncia.app | 𝑥 < 4.4.8 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration