A vulnerability classified as problematic was found in CanalDenuncia.app up to 4.4.7. Affected by this issue is some unknown functionality of the file /backend/api/buscarDocumentosByIdDenunciaUsuario.php. Executing manipulation of the argument id_denuncia can lead to missing authorization.
This vulnerability is handled as CVE-2025-41114. The attack can be executed remotely. There is not any exploit available.
Upgrading the affected component is advised.
