CVE-2025-3405

CVE-2025-3405 affects FCJ Venture Builder appclientefiel 3.0.27. The vulnerability exists in the HTTP GET endpoint /rest/cliente/ObterPedido/ where manipulating the ORDER_ID parameter leads to improper control of resource identifiers. The issue can be exploited remotely and the exploit has been d...