CVE-2025-41344 | CanalDenuncia.app up to 4.4.7 verArchivo.php id_archivo authorization

November 4, 2025 Yanac

A vulnerability labeled as problematic has been found in CanalDenuncia.app up to 4.4.7. Affected by this vulnerability is an unknown functionality of the file /backend/api/verArchivo.php. Such manipulation of the argument id_archivo leads to missing authorization.

This vulnerability is documented as CVE-2025-41344. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More