CVE-2025-3574

CVE-2025-3574 —Insecure Direct Object Reference in Deporsite (T-INNOVA). An attacker can retrieve another user’s sensitive information by manipulating the idUsuario parameter of the /helper/Familia/obtenerFamiliaUsuario endpoint. Root cause: improper access control on user data access. Documented...

PT-2025-16306

Name of the Vulnerable Software and Affected Versions Deporsite from T-INNOVA affected versions not specified Description The issue allows an attacker to retrieve sensitive information from other users. This is achieved via the idUsuario parameter in the "/helper/Familia/obtenerFamiliaUsuario"...