A vulnerability marked as problematic has been reported in T-INNOVA Deporsite. Impacted is an unknown function of the file /ajax/TInnova_c/FotoUsuario/llamadaAjax/uploadImage of the component POST Request Handler. The manipulation of the argument IdPersona/Foto leads to incorrect authorization.
This vulnerability is documented as CVE-2025-41031. The attack can be initiated remotely. There is not any exploit available.
It is suggested to upgrade the affected component.
