CVE-2025-3405

A vulnerability was found in FCJ Venture Builder appclientefiel 3.0.27. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /rest/cliente/ObterPedido/ of the component HTTP GET Request Handler. The manipulation of the argument ORDERID leads ...

CVE-2025-3405

creationtimestamp| type| source ---|---|--- 2025-04-08 03:45:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10825 2025-04-08 05:17:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmbpwobeqi2g 2025-04-08 08:08:03+00:00| seen|...

CVE-2025-3405 FCJ Venture Builder appclientefiel HTTP GET Request ObterPedido resource injection

A vulnerability was found in FCJ Venture Builder appclientefiel 3.0.27. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /rest/cliente/ObterPedido/ of the component HTTP GET Request Handler. The manipulation of the argument ORDERID leads ...

CVE-2025-3405

CVE-2025-3405 affects FCJ Venture Builder appclientefiel 3.0.27. The vulnerability exists in the HTTP GET endpoint /rest/cliente/ObterPedido/ where manipulating the ORDER_ID parameter leads to improper control of resource identifiers. The issue can be exploited remotely and the exploit has been d...