CVE-2025-41339 | CanalDenuncia.app up to 4.4.7 buscarTipoDenuncia.php id_sociedad authorization

November 4, 2025 Yanac

A vulnerability was found in CanalDenuncia.app up to 4.4.7. It has been classified as problematic. The affected element is an unknown function of the file /backend/api/buscarTipoDenuncia.php. Performing manipulation of the argument id_sociedad results in missing authorization.

This vulnerability is identified as CVE-2025-41339. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More