CVE Intelligence

Vulnerabilidades do CronosWeb i2A CronosWeb

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam CronosWeb i2A CronosWeb: 1 registro(s), com versões afetadas e correções.

CVE-2025-41358 Alta · 8.3 CWE-639 10/12/2025
Direct reference to insecure objects (IDOR) in CronosWeb from CronosWeb i2A
Direct Object Reference Vulnerability (IDOR) in i2A's CronosWeb, in versions prior to 25.00.00.12, inclusive. This vulnerability could allow an authenticated attacker to access other users' documents by manipulating the ‘documentCode’ parameter in '/CronosWeb/Modulos/Personas/DocumentosPersonales/AdjuntarDocumentosPersonas'.