CVE-2025-41358 | i2A CronosWeb prior 25.00.00.12 AdjuntarDocumentosPersonas documentCode authorization

December 10, 2025 Yanac

A vulnerability classified as problematic has been found in i2A CronosWeb. Impacted is an unknown function of the file /CronosWeb/Modulos/Personas/DocumentosPersonales/AdjuntarDocumentosPersonas. This manipulation of the argument documentCode causes authorization bypass.

This vulnerability appears as CVE-2025-41358. The attack may be initiated remotely. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More