← Database

CVE-2025-41358

N/A CVSS: N/A Published: 2025-12-10 Modified: 2026-06-17

Description

Direct Object Reference Vulnerability (IDOR) in i2A's CronosWeb, in versions prior to 25.00.00.12, inclusive. This vulnerability could allow an authenticated attacker to access other users' documents by manipulating the ‘documentCode’ parameter in '/CronosWeb/Modulos/Personas/DocumentosPersonales/AdjuntarDocumentosPersonas'.

Affected Platforms

Unknown

Weakness Type

CWE-639

References