CVE-2025-3574

Published: 2025-04-15T09:15Z

Last Modified: 2025-04-15T09:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Insecure Direct Object Reference vulnerability in Deporsite from T-INNOVA allows an attacker to retrieve sensitive information from others users via "idUsuario" parameter in "/helper/Familia/obtenerFamiliaUsuario" endpoint. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt