CVE-2025-3574 Information
Apr 16, 2025
cve
Description
Insecure Direct Object Reference vulnerability in Deporsite from T-INNOVA allows an attacker to retrieve sensitive information from others users via \idUsuario\ parameter in /helper/Familia/obtenerFamiliaUsuario\ endpoint.