CVE-2025-41113 | CanalDenuncia.app up to 4.4.7 buscarDenunciaByPin.php id_denuncia authorization

November 4, 2025 Yanac

A vulnerability classified as problematic has been found in CanalDenuncia.app up to 4.4.7. Affected by this vulnerability is an unknown functionality of the file /backend/api/buscarDenunciaByPin.php. Performing manipulation of the argument id_denuncia results in missing authorization.

This vulnerability is known as CVE-2025-41113. Remote exploitation of the attack is possible. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More