Bottinelli Informatical Vedo Suite 2024.17 is vulnerable to Server-side Request Forgery (SSRF) in the /api_vedo/video/preview endpoint, which allows remote authenticated attackers to trigger HTTP requests towards arbitrary remote paths via the "file" URL parameter.
References
| Link | Resource |
|---|---|
| http://bottinelli.com | Broken Link |
| https://github.com/jacopoaugelli/vedo-suite-exploits | Exploit |
| https://github.com/jacopoaugelli/vedo-suite-exploits | Exploit |
Configurations
History
09 Oct 2025, 17:36
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:vedo_suite_project:vedo_suite:2024.17:*:*:*:*:*:*:* | |
| References | () http://bottinelli.com - Broken Link | |
| References | () https://github.com/jacopoaugelli/vedo-suite-exploits - Exploit | |
| First Time |
Vedo Suite Project vedo Suite
Vedo Suite Project |
07 Aug 2025, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
|
| References | () https://github.com/jacopoaugelli/vedo-suite-exploits - | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| CWE | CWE-918 |
06 Aug 2025, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-08-06 21:15
Updated : 2025-10-09 17:36
NVD link : CVE-2025-51058
Mitre link : CVE-2025-51058
CVE.ORG link : CVE-2025-51058
JSON object : View
Products Affected
vedo_suite_project
- vedo_suite
CWE
CWE-918
Server-Side Request Forgery (SSRF)