VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 4, 2025· Updated Nov 4, 2025

Missing Authorization vulnerability in CanalDenuncia.app

CVE-2025-41342

Description

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'id_user' in '/backend/api/buscarUsuarioId.php'.

Affected products

1
  • CanalDenuncia/CanalDenuncia.appv5
    Range: 0

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.