ktr4ck3r/CVE-2025-52389

ktr4ck3r/CVE-2025-52389

Releases0
An Insecure Direct Object Reference (IDOR) in Envasadora H2O Eireli - Soda Cristal v40.20.4 allows unauthenticated attackers to access sensitive data for other users via a crafted HTTP request.

CVE History

CVEPublishedCVSS v3CVSS v2
8.8 HIGH

An Insecure Direct Object Reference (IDOR) in Envasadora H2O Eireli - Soda Cristal v40.20.4 allows authenticated attackers to access sensitive data for other users via a crafted HTTP request.