CVE-2025-41342 | CanalDenuncia.app up to 4.4.7 buscarUsuarioId.php id_user authorization

November 4, 2025 Yanac

A vulnerability categorized as problematic has been discovered in CanalDenuncia.app up to 4.4.7. This impacts an unknown function of the file /backend/api/buscarUsuarioId.php. The manipulation of the argument id_user results in missing authorization.

This vulnerability is cataloged as CVE-2025-41342. The attack may be launched remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More