Lucene search
+L

4 matches found

OSV
OSV
•added 2025/11/04 2:15 p.m.•15 views

CVE-2025-41337

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'web' in '/backend/api/buscarSSOParametros.php'...

7.5CVSS5.8AI score0.00322EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/11/04 1:16 p.m.•23 views

CVE-2025-41337 Missing Authorization vulnerability in CanalDenuncia.app

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'web' in '/backend/api/buscarSSOParametros.php'...

8.7CVSS0.00322EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/04 12:00 a.m.•4 views

CVE-2025-41337: Missing Authorization

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'web' in '/backend/api/buscarSSOParametros.php'...

8.7CVSS5.7AI score0.00322EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/11/04 12:00 a.m.•20 views

PT-2025-45002

Name of the Vulnerable Software and Affected Versions CanalDenuncia.app affected versions not specified Description A lack of authorization exists in CanalDenuncia.app. An attacker can access other users' information by sending a POST request through the web parameter in the...

8.7CVSS6.5AI score0.00322EPSS
SaveExploits0References3
Rows per page
Query Builder