Security Advisory
CVE-2025-41358
N/A
UNKNOWN
Vulnerability Description
Direct Object Reference Vulnerability (IDOR) in i2A's CronosWeb, in versions prior to 25.00.00.12, inclusive. This vulnerability could allow an authenticated attacker to access other users' documents by manipulating the ‘documentCode’ parameter in '/CronosWeb/Modulos/Personas/DocumentosPersonales/AdjuntarDocumentosPersonas'.
Published Date
December 10, 2025
Official Source
NIST NVD Advisory