Authorization Flaw in CanalDenuncia.app

CVE-2025-41111

What is CVE-2025-41111?

A security issue has been identified in CanalDenuncia.app that permits unauthorized access to users' information. By manipulating the 'id_denuncia' parameter in the '/backend/api/buscarComentariosByDenuncia.php' endpoint, an attacker may gain access to sensitive data belonging to other users. This flaw emphasizes the need for robust authorization mechanisms to safeguard user privacy and prevent unauthorized data exposure.

References