Authorization Flaw in CanalDenuncia.app by Canal Denuncia

CVE-2025-41113

What is CVE-2025-41113?

An authorization flaw has been identified in CanalDenuncia.app, enabling attackers to exploit the system by manipulating POST requests. This vulnerability permits unauthorized users to retrieve sensitive information belonging to other users by exploiting the 'id_denuncia' parameter in the request to '/backend/api/buscarDenunciaByPin.php'. The exposure of user data due to this vulnerability poses significant risks to privacy and confidentiality.

References