A vulnerability classified as problematic has been found in CanalDenuncia.app up to 4.4.7. Affected by this vulnerability is an unknown functionality of the file /backend/api/buscarDenunciaByPin.php. Performing manipulation of the argument id_denuncia results in missing authorization.
This vulnerability is known as CVE-2025-41113. Remote exploitation of the attack is possible. No exploit is available.
It is recommended to upgrade the affected component.
