CVE-2025-2125

CVE-2025-2125 affects Control iD RH iD 25.2.25.0, specifically the PDF Document Handler. The vulnerability lies in the handling of the parameter nsr for the endpoint /v2/report.svc/comprovante_marcacao/?companyId=1, causing improper control of resource identifiers. The issue is exploitable remote...

CVE-2023-2043

CVE-2023-2043 affects Control iD RHiD 23.3.19.0, specifically the Edit Handler’s file path /v2/customerdb/operator.svc/a. The vulnerability arises from manipulating the email argument, leading to SQL injection, with remote attack possible. Public details confirm the issue but do not provide a fix...