CVE-2025-41345

HIGH 7.5CVE-2025-41345 · Published 04/11/2025 · updated 18/10/2026

In short

CVE-2025-41345 is a HIGH (CVSS 7.5) vulnerability affecting canaldenuncia.app (canaldenuncia).
Chance of exploitation in the next 30 days (EPSS): 0.30%, higher than 22.3% of all vulnerabilities.
Fix: update to 4.4.8 or later.

Package	Affected versions	Patched versions
canaldenuncia.app canaldenuncia	`< 4.4.8`	`4.4.8`

Description

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'id_denuncia' and 'id_user' in '/backend/api/buscarDenunciasById.php'.

References

incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-canaldenunciaapp · Third Party Advisory

More vulnerabilities in canaldenuncia.app

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

canaldenuncia.app

canaldenuncia

< 4.4.8

4.4.8

More vulnerabilities in canaldenuncia.app

See all →