Description
An Insecure Direct Object Reference (IDOR) in Envasadora H2O Eireli - Soda Cristal v40.20.4 allows authenticated attackers to access sensitive data for other users via a crafted HTTP request.
High · 8.8
CVE-2025-52389
EUVD-2025-27172GHSA-7pcv-82qf-g35c
An Insecure Direct Object Reference (IDOR) in Envasadora H2O Eireli - Soda Cristal v40.20.4 allows authenticated attackers to access sensit…
Published Sep 8, 2025 · Updated Sep 8, 2025 · Assigned by mitre