Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jrvr-2g4h-rvr6

Опубликовано: 13 нояб. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 5.3

Описание

Insecure Direct Object Reference (IDOR) vulnerability in DeporSite of T-INNOVA. This vulnerability allows an attacker to access or modify unauthorized resources by manipulating requests using the 'idUsuario' parameter in ‘/ajax/TInnova_v2/Formulario_Consentimiento/llamadaAjax/obtenerDatosConsentimientos’, which could lead to the exposure or alteration os confidential data.

Insecure Direct Object Reference (IDOR) vulnerability in DeporSite of T-INNOVA. This vulnerability allows an attacker to access or modify unauthorized resources by manipulating requests using the 'idUsuario' parameter in ‘/ajax/TInnova_v2/Formulario_Consentimiento/llamadaAjax/obtenerDatosConsentimientos’, which could lead to the exposure or alteration os confidential data.

EPSS

Процентиль: 18%
0.00058
Низкий

5.3 Medium

CVSS4

Дефекты

CWE-639

Связанные уязвимости

nvd
3 месяца назад

Insecure Direct Object Reference (IDOR) vulnerability in DeporSite of T-INNOVA. This vulnerability allows an attacker to access or modify unauthorized resources by manipulating requests using the 'idUsuario' parameter in ‘/ajax/TInnova_v2/Formulario_Consentimiento/llamadaAjax/obtenerDatosConsentimientos’, which could lead to the exposure or alteration os confidential data.

EPSS

Процентиль: 18%
0.00058
Низкий

5.3 Medium

CVSS4

Дефекты

CWE-639