CVE-2025-51058 Information

Aug 07, 2025 cve

Description

Bottinelli Informatical Vedo Suite 2024.17 is vulnerable to Server-side Request Forgery (SSRF) in the /api_vedo/video/preview endpoint which allows remote authenticated attackers to trigger HTTP requests towards arbitrary remote paths via the ile\ URL parameter.

Reference

http://bottinelli.com https://github.com/jacopoaugelli/vedo-suite-exploits

CNNVD-202508-631 (Published: 2025-08-06)

Share on: