TI-2025-08429 Aliases CVE-2025-9193 GHSA-rxg6-h36v-7jcx

TOTVS Portal Meu RH Password Reset redirect

LOW 23CWE-601Published 2025-08-20 · Updated 2025-08-22

Key facts

Attack vector: Network
Privileges required: Low
User interaction: Passive
Attack complexity: Low
Attack requirements: None
Impact type: Spoofing
Confidentiality · integrity · availability: None · Low · None
Fix status: Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-601.

Summary

A flaw has been found in TOTVS Portal Meu RH up to 12.1.17. Impacted is an unknown function of the component Password Reset Handler. Executing manipulation of the argument redirectUrl can lead to open redirect. The attack may be performed from a remote location. The exploit has been published and may be used. Upgrading to version 12.1.2410.274, 12.1.2502.178 and 12.1.2506.121 is recommended to address this issue. It is recommended to upgrade the affected component. The vendor explains, that "[o]ur internal validation (...) confirms that the reported behavior does not exist in currently supported releases. In these tests, the redirectUrl parameter is ignored, and no malicious redirection occurs." This vulnerability only affects products that are no longer supported by the maintainer.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00262 18th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by the CNA

Fix Fixed Portal Meu RH (TOTVS): 12.1.2410.274, 12.1.2502.178, 12.1.2506.121

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
TOTVS	Portal Meu RH	12.1.0; 12.1.1; 12.1.2; 12.1.3; 12.1.4; 12.1.5; 12.1.6; 12.1.7; 12.1.8; 12.1.9; 12.1.10; 12.1.11; 12.1.12; 12.1.13; 12.1.14; 12.1.15; 12.1.16; 12.1.17	12.1.2410.274, 12.1.2502.178, 12.1.2506.121	Patch available	CNA

Portal Meu RH VendorTOTVS Affected 12.1.0; 12.1.1; 12.1.2; 12.1.3; 12.1.4; 12.1.5; 12.1.6; 12.1.7; 12.1.8; 12.1.9; 12.1.10; 12.1.11; 12.1.12; 12.1.13; 12.1.14; 12.1.15; 12.1.16; 12.1.17 Fixed in 12.1.2410.274, 12.1.2502.178, 12.1.2506.121 Patch available CNA

Remediation

Fix · CNA Portal Meu RH (TOTVS) Fixed in 12.1.2410.274, 12.1.2502.178, 12.1.2506.121

Timeline

2026-10-02 Threatist record created from CVE-2025-9193
2026-10-03 Alias added: GHSA-rxg6-h36v-7jcx

References

Exploit 1

https://drive.google.com/file/d/1iorjSJ8gh3hTDZUy1fHyV-TJXFP43yIo/view?usp=sharing

TI-2020-17568 The TOTVS Fluig platform allows path traversal through the parameter "file = .. CVSS 3.1HIGH 8.6
TI-2024-36795 An issue in TOTVS Framework (Linha Protheus) 12.1.2310 allows attackers to bypass… CVSS 3.1CRITICAL 9.8
TI-2023-05763 TOTVS Fluig Platform mobileredir openApp.jsp cross site scripting CVSS 3.1MEDIUM 6.1
TI-2023-04340 TOTVS RM Portal cross site scripting CVSS 3.1MEDIUM 6.1
TI-2023-04339 TOTVS RM Portal Login.aspx cross site scripting CVSS 4.0LOW 2.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences