Vedo Suite 2024.17 is vulnerable to Incorrect Access Control, which allows remote attackers to obtain a valid high privilege JWT token without prior authentication via sending an empty HTTP POST request to the /autologin/ API endpoint.
CVSS
No CVSS.
References
Configurations
No configuration.
History
06 Aug 2025, 21:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2025-08-06 21:15
Updated : 2025-08-06 21:15
NVD link : CVE-2025-51054
Mitre link : CVE-2025-51054
JSON object : View
Products Affected
No product.
CWE
No CWE.