CVE-2025-41336

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'web' in '/backend/api/buscarConfiguracionParametros.php'...

CVE-2025-41336 Missing Authorization vulnerability in CanalDenuncia.app

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'web' in '/backend/api/buscarConfiguracionParametros.php'...

CVE-2025-41336

CVE-2025-41336 describes a lack of authorization in CanalDenuncia.app. A malicious actor could access other users’ information by sending a POST request to the API endpoint /backend/api/buscarConfiguracionParametros.php with the parameter web. The effect is exposure of user data due to missing ac...