VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 4, 2025· Updated Nov 4, 2025

Missing Authorization vulnerability in CanalDenuncia.app

CVE-2025-41113

Description

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'id_denuncia' in '/backend/api/buscarDenunciaByPin.php'.

Affected products

1
  • CanalDenuncia/CanalDenuncia.appv5
    Range: 0

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.