High severity8.8NVD Advisory· Published Sep 8, 2025· Updated Apr 15, 2026
CVE-2025-52389
CVE-2025-52389
Description
An Insecure Direct Object Reference (IDOR) in Envasadora H2O Eireli - Soda Cristal v40.20.4 allows authenticated attackers to access sensitive data for other users via a crafted HTTP request.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: =40.20.4
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.