Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2025-3575

Insecure Direct Object Reference en Deporsite de T-INNOVA

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
INCIBE

Description

Insecure Direct Object Reference vulnerability in Deporsite from T-INNOVA allows an attacker to retrieve sensitive information from others users via "idUsuario" parameter in "/helper/Familia/establecerUsuarioSeleccion" endpoint.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

T-INNOVA Deporsite

Default version status: unaffected

  • v05.29.0907affected

References