https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T06:57:37.839125+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-41358 CVE-2025-41358 — Direct reference to insecure objects (IDOR) in CronosWeb from CronosWeb i2A 2026-10-22T06:57:37.840166+00:00

Affected: CronosWeb i2A CronosWeb

Direct Object Reference Vulnerability (IDOR) in i2A's CronosWeb, in versions prior to 25.00.00.12, inclusive. This vulnerability could allow an authenticated attacker to access other users' documents by manipulating the ‘documentCode’ parameter in '/CronosWeb/Modulos/Personas/DocumentosPersonales/AdjuntarDocumentosPersonas'.