CVE Intelligence

Vulnerabilidades de CronosWeb i2A

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de CronosWeb i2A: 1 registro(s), com severidade, exploração e correções.

CronosWeb 1

Somente exploradas (KEV) →

CVE-2025-41358 Alta · 8.3 CWE-639 10/12/2025
Direct reference to insecure objects (IDOR) in CronosWeb from CronosWeb i2A
Direct Object Reference Vulnerability (IDOR) in i2A's CronosWeb, in versions prior to 25.00.00.12, inclusive. This vulnerability could allow an authenticated attacker to access other users' documents by manipulating the ‘documentCode’ parameter in '/CronosWeb/Modulos/Personas/DocumentosPersonales/AdjuntarDocumentosPersonas'.