A vulnerability described as problematic has been identified in CanalDenuncia.app up to 4.4.7. Affected is an unknown function of the file /backend/api/buscarConfiguracionParametros2.php. Such manipulation of the argument web leads to missing authorization.
This vulnerability is traded as CVE-2025-41112. The attack may be launched remotely. There is no exploit available.
Upgrading the affected component is recommended.
