CVE-2025-41112 | CanalDenuncia.app up to 4.4.7 buscarConfiguracionParametros2.php web authorization

November 4, 2025 Yanac

A vulnerability described as problematic has been identified in CanalDenuncia.app up to 4.4.7. Affected is an unknown function of the file /backend/api/buscarConfiguracionParametros2.php. Such manipulation of the argument web leads to missing authorization.

This vulnerability is traded as CVE-2025-41112. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More