Логотип exploitDog
bind:CVE-2025-41341
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-41341

Количество 2

Количество 2

nvd логотип

CVE-2025-41341

3 месяца назад

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'id_denuncia' and 'seguro' in '/backend/api/buscarUsuarioByDenuncia.php'.

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-9c27-692h-jwpm

3 месяца назад

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'id_denuncia' and 'seguro' in '/backend/api/buscarUsuarioByDenuncia.php'.

CVSS3: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2025-41341

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'id_denuncia' and 'seguro' in '/backend/api/buscarUsuarioByDenuncia.php'.

CVSS3: 7.5
0%
Низкий
3 месяца назад
github логотип
GHSA-9c27-692h-jwpm

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'id_denuncia' and 'seguro' in '/backend/api/buscarUsuarioByDenuncia.php'.

CVSS3: 7.5
0%
Низкий
3 месяца назад

Уязвимостей на страницу