← Database

CVE-2025-41343

HIGH CVSS: 7.5 Published: 2025-11-04 Modified: 2026-06-17

Description

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'email' in '/backend/api/users/searchUserByEmail.php'.

Affected Platforms

Canaldenuncia Canaldenuncia.App

Weakness Type

CWE-862

References