Anapi Group vulnerabilities
We track 1 vulnerability in Anapi Group products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on February 13, 2025.
1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score
Latest Anapi Group vulnerabilities
- 7.1 High severity
H6Web: Authorization Bypass Through User-Controlled Key
Insecure direct object reference (IDOR) vulnerability in Anapi Group's h6web, allows an authenticated attacker to access other users' information by making a POST request and modifying the “pkrelated” parameter in the “/h6web/ha_datos_hermano.php” endpoint to