Vulnerabilidades de T-Innova DeporSite
CVEs publicadas que afetam produtos de T-Innova DeporSite: 1 registro(s), com severidade, exploração e correções.
CVE-2025-41069
Média · 5.3
CWE-639 13/11/2025
Insecure Direct Object References (IDOR) in DeporSite of T-Innova DeporSite
Insecure Direct Object Reference (IDOR) vulnerability in DeporSite of T-INNOVA. This vulnerability allows an attacker to access or modify unauthorized resources by manipulating requests using the 'idUsuario' parameter in ‘/ajax/TInnova_v2/Formulario_Consentimiento/llamadaAjax/obtenerDatosConsentimientos’, which could lead to the exposure or alteration os confidential data.