CVE-2025-41343 | CanalDenuncia.app up to 4.4.7 searchUserByEmail.php email authorization

November 4, 2025 Yanac

A vulnerability identified as problematic has been detected in CanalDenuncia.app up to 4.4.7. Affected is an unknown function of the file /backend/api/users/searchUserByEmail.php. This manipulation of the argument email causes missing authorization.

This vulnerability is registered as CVE-2025-41343. Remote exploitation of the attack is possible. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More