Múltiples vulnerabilidades en Negotiator de BBMRI-ERIC
Vulnerability Description
Insecure Direct Object Reference (IDOR) in Negotiator v3.15.2 from Biobanking and Biomolecular Resources - European Research Infrastructure (BBMRI-ERIC). This vulnerability allows an attacker to access or modify unauthorised resources by manipulating requests that use the 'userID' parameter in '/api/v3/users/<userID>', which may result in the exposure or alteration of sensitive data
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-40676
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Erlaitz Parreño Muñoz
References
Affected Vendor
BBMRI-ERIC
View all reports →