Auth bypass in T-innova Deporsite Dsuite 2025

CVE-2025-41069

Insecure Direct Object Reference (IDOR) vulnerability in DeporSite of T-INNOVA. This vulnerability allows an attacker to access or modify unauthorized resources by manipulating requests using the 'idUsuario' parameter in ‘/ajax/TInnova_v2/…

Vulnerability class: IDOR (Insecure Direct Object Reference)

EPSS: 0.002 (11.8th percentile) — read the EPSS interpretation.