Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Kauan Akyra Watanabe Ferreira

Researcher fromIntruderlabs
#36278of 53,635
7.5Total CVSS
Vulnerabilities · 1
PT-2025-23550
7.5
2025-06-02
Weblaudos · Weblaudos · CVE-2025-27956
**Name of the Vulnerable Software and Affected Versions** WebLaudos version 24.2 (04) **Description** A Directory Traversal issue allows a remote attacker to obtain sensitive information via the `id` parameter. This enables the attacker to access confidential data. **Recommendations** For WebLaudos version 24.2 (04), as a temporary workaround, consider restricting access to the `id` parameter in the affected API endpoint until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.