CVE-2025-49852 — Server-Side Request Forgery (SSRF) in ControlID iDSecure On-premises
ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to a server-side request forgery vulnerability which could allow an unauthenticated attacker to retriev…
Published: 2025-06-24 · CVSS: 8.7 · CVSS 4.0
ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to a server-side request forgery vulnerability which could allow an unauthenticated attacker to retrieve information from other servers.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7