← Database

CVE-2025-41341

HIGH CVSS: 7.5 Published: 2025-11-04 Modified: 2026-06-17

Description

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'id_denuncia' and 'seguro' in '/backend/api/buscarUsuarioByDenuncia.php'.

Affected Platforms

Canaldenuncia Canaldenuncia.App

Weakness Type

CWE-862

References