VULNERABILITY INTELLIGENCE
CVE-2025-3574
EPSS probability0.47%
CISA KEVNot currently listed
Published2025-04-15
Last modified2026-06-17
Description
Insecure Direct Object Reference vulnerability in Deporsite from T-INNOVA allows an attacker to retrieve sensitive information from others users via "idUsuario" parameter in "/helper/Familia/obtenerFamiliaUsuario" endpoint.
Weakness classification
- cve-coordination@incibe.es: CWE-639