CVE-2025-41336 | CanalDenuncia.app up to 4.4.7 buscarConfiguracionParametros.php web authorization

November 4, 2025 Yanac

A vulnerability, which was classified as problematic, was found in CanalDenuncia.app up to 4.4.7. This vulnerability affects unknown code of the file /backend/api/buscarConfiguracionParametros.php. The manipulation of the argument web results in missing authorization.

This vulnerability was named CVE-2025-41336. The attack may be performed from remote. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More