Vulnerabilities
CVE-2025-41358 - Direct reference to insecure objects (IDOR) in CronosWeb from CronosWeb i2A
CVE ID : CVE-2025-41358 Published : Dec. 10, 2025, 12:16 p.m. | 31 minutes ago Description : Direct Object Reference Vulnerability (IDOR) in i2A's CronosWeb, in versions prior to 25.00.00.12, inclusive. This vulnerability could allow an authenticated attacker to access other users' documents by manipulating the ‘documentCode’ parameter in '/CronosWeb/Modulos/Personas/DocumentosPersonales/AdjuntarDocumentosPersonas'. Severity: 8.3 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE Details
Source: Telegram CVE Monitor