CVE-2025-41114

creationtimestamp| type| source ---|---|--- 2025-11-04 13:42:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4snzprofu2w...

CVE-2025-41114

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'iddenuncia' and 'iduser' in '/backend/api/buscarDocumentosByIdDenunciaUsuario.php'...