Bottinelli Informatical Vedo Suite 2024.17 is vulnerable to Server-side Request Forgery (SSRF) in the /api_vedo/video/preview endpoint, which allows remote authenticated attackers to trigger HTTP requests towards arbitrary remote paths via the "file" URL parameter.
CVSS
No CVSS.
References
Configurations
No configuration.
History
06 Aug 2025, 21:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2025-08-06 21:15
Updated : 2025-08-07 14:15
NVD link : CVE-2025-51058
Mitre link : CVE-2025-51058
JSON object : View
Products Affected
No product.
CWE
No CWE.