cvedb.io
CVE-2025-2125
MEDIUM · CVSS 4.3
EPSS exploitation probability: 0%
Published 2025-03-09T16:15:12.550 · Last modified 2026-06-17T09:06:22.653

Summary

A vulnerability has been found in Control iD RH iD 25.2.25.0 and classified as problematic. This vulnerability affects unknown code of the file /v2/report.svc/comprovante_marcacao/?companyId=1 of the component PDF Document Handler. The manipulation of the argument nsr leads to improper control of resource identifiers. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

assaabloy — control_id_rhid

Does this affect you?

Add your gear to cvedb and we'll alert you only when assaabloy ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.