High · published November 4, 2025
⚡ A simple POST request is all it takes for an attacker to peek into other users' data on CanalDenuncia.app! Think of it like a restaurant where a waiter can see everyone’s orders just by changing the table number; all they need is that little slip with the new table info to access someone else's meal! With this vulnerability, an attacker could access sensitive user information, risking privacy and trust. They could explore all the details of other users as easily as flipping through a public guestbook at a hotel. This could lead to identity theft or worse!
Think of it like a restaurant where a waiter can see everyone’s orders just by changing the table number; all they need is that little slip with the new table info to access someone else's meal! This vulnerability arises from a lack of authorization in the API endpoint '/backend/api/buscarUsuarioId.php', allowing attackers to exploit the 'id_user' parameter to fetch data from any other user without proper checks.
With this vulnerability, an attacker could access sensitive user information, risking privacy and trust. They could explore all the details of other users as easily as flipping through a public guestbook at a hotel. This could lead to identity theft or worse! To remediate, ensure strict authorization checks are implemented in the API to validate user access. Patch the application promptly and consider a thorough audit of your API endpoints to prevent similar issues in the future. You've got this! By taking these steps, you'll strengthen the security of CanalDenuncia.app and protect your users. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| canaldenuncia/canaldenuncia.app | < 4.4.8 | 4.4.8 |