CronosWeb vulnerabilities

1 known vulnerability in CronosWeb from CronosWeb i2A. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.3 High severity

  CronosWeb: Authorization Bypass Through User-Controlled Key

  CVE-2025-41358Dec 10, 2025CronosWeb i2A

  Direct Object Reference Vulnerability (IDOR) in i2A's CronosWeb, in versions prior to 25.00.00.12, inclusive. This vulnerability could allow an authenticated attacker to access other users' documents by manipulating the ‘documentCode’ parameter in '/CronosWeb/