https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-41345.htmlhttps://patchthecve.com/cve/CVE-2025-41345.htmlSun, 18 Oct 2026 21:10:00 +0000HIGH 7.5: A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'id_denuncia' and 'id_user' in '/backend/api/buscarDenunciasById.php'.https://patchthecve.com/cve/CVE-2025-41344.htmlhttps://patchthecve.com/cve/CVE-2025-41344.htmlSun, 18 Oct 2026 21:10:00 +0000HIGH 7.5: A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'id_archivo' in '/backend/api/verArchivo.php'.https://patchthecve.com/cve/CVE-2025-41343.htmlhttps://patchthecve.com/cve/CVE-2025-41343.htmlSun, 18 Oct 2026 21:10:00 +0000HIGH 7.5: A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'email' in '/backend/api/users/searchUserByEmail.php'.https://patchthecve.com/cve/CVE-2025-41342.htmlhttps://patchthecve.com/cve/CVE-2025-41342.htmlSun, 18 Oct 2026 21:10:00 +0000HIGH 7.5: A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'id_user' in '/backend/api/buscarUsuarioId.php'.https://patchthecve.com/cve/CVE-2025-41341.htmlhttps://patchthecve.com/cve/CVE-2025-41341.htmlSun, 18 Oct 2026 21:10:00 +0000HIGH 7.5: A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'id_denuncia' and 'seguro' in '/backend/api/buscarUsuarioByDenuncia.php'.https://patchthecve.com/cve/CVE-2025-41340.htmlhttps://patchthecve.com/cve/CVE-2025-41340.htmlSun, 18 Oct 2026 21:10:00 +0000HIGH 7.5: A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'id_tp_denuncia' and 'id_sociedad' in '/backend/api/buscarTipoDenunciabyId.php'.https://patchthecve.com/cve/CVE-2025-41339.htmlhttps://patchthecve.com/cve/CVE-2025-41339.htmlSun, 18 Oct 2026 21:10:00 +0000HIGH 7.5: A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'id_sociedad' in '/backend/api/buscarTipoDenuncia.php'.https://patchthecve.com/cve/CVE-2025-41338.htmlhttps://patchthecve.com/cve/CVE-2025-41338.htmlSun, 18 Oct 2026 21:10:00 +0000HIGH 7.5: A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'id_denuncia' and 'id_user' in '/backend/api/buscarTestigoByIdDenunciaUsuario.php'.https://patchthecve.com/cve/CVE-2025-41337.htmlhttps://patchthecve.com/cve/CVE-2025-41337.htmlSun, 18 Oct 2026 21:10:00 +0000HIGH 7.5: A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'web' in '/backend/api/buscarSSOParametros.php'.https://patchthecve.com/cve/CVE-2025-41336.htmlhttps://patchthecve.com/cve/CVE-2025-41336.htmlSun, 18 Oct 2026 21:10:00 +0000HIGH 7.5: A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'web' in '/backend/api/buscarConfiguracionParametros.php'.https://patchthecve.com/cve/CVE-2025-41335.htmlhttps://patchthecve.com/cve/CVE-2025-41335.htmlSun, 18 Oct 2026 21:10:00 +0000HIGH 7.5: A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'id' and ' 'id_sociedad' in '/api/buscarEmpresaById.php'.https://patchthecve.com/cve/CVE-2025-41114.htmlhttps://patchthecve.com/cve/CVE-2025-41114.htmlSun, 18 Oct 2026 21:10:00 +0000HIGH 7.5: A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'id_denuncia' and 'id_user' in '/backend/api/buscarDocumentosByIdDenunciaUsuario.php'.https://patchthecve.com/cve/CVE-2025-41113.htmlhttps://patchthecve.com/cve/CVE-2025-41113.htmlSun, 18 Oct 2026 21:10:00 +0000HIGH 7.5: A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'id_denuncia' in '/backend/api/buscarDenunciaByPin.php'.https://patchthecve.com/cve/CVE-2025-41112.htmlhttps://patchthecve.com/cve/CVE-2025-41112.htmlSun, 18 Oct 2026 21:10:00 +0000HIGH 7.5: A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'web' in '/backend/api/buscarConfiguracionParametros2.php'.https://patchthecve.com/cve/CVE-2025-41111.htmlhttps://patchthecve.com/cve/CVE-2025-41111.htmlSun, 18 Oct 2026 21:10:00 +0000HIGH 7.5: A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'id_denuncia' in '/backend/api/buscarComentariosByDenuncia.php'.