Vedo Suite
Approved changes feed: RSS · Atom
cpe:2.3:a:vedo_suite_project:vedo_suite:2024.17:*:*:*:*:*:*:*part: a version: 2024.17 update: *
| Vendor | Vedo Suite Project (6aeb72fe-03b1-514f-88e3-d91211cabc24) |
|---|---|
| Product | Vedo Suite (2d8ba4df-4dc9-551d-85fd-1b41917a131e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-51058 |
vulnerable | 2026-06-08 07:31:11.151036 |
Details available
Bottinelli Informatical Vedo Suite 2024.17 is vulnerable to Server-side Request Forgery (SSRF) in the /api_vedo/video/preview endpoint, which allows remote authenticated attackers to trigger HTTP requests towards arbitrary remote paths via the "file" URL parameter.
Published: 2025-08-06T00:00:00.000Z
Updated: 2026-07-05T01:07:46.195Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-51057 |
vulnerable | 2026-06-08 07:31:11.150573 |
Details available
A local file inclusion (LFI) vulnerability in Vedo Suite version 2024.17 allows remote authenticated attackers to read arbitrary filesystem files by exploiting an unsanitized 'readfile()' function call in '/api_vedo/video/preview'.
Published: 2025-08-06T00:00:00.000Z
Updated: 2026-07-05T01:07:42.376Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-51056 |
vulnerable | 2026-06-08 07:31:11.150305 |
Details available
An unrestricted file upload vulnerability in Vedo Suite version 2024.17 allows remote authenticated attackers to write to arbitrary filesystem paths by exploiting the insecure 'uploadPreviews()' custom function in '/api_vedo/colorways_preview', ultimately resulting in remote code execution (RCE).
Published: 2025-08-06T00:00:00.000Z
Updated: 2026-07-05T01:07:38.400Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-51055 |
vulnerable | 2026-06-08 07:31:11.149755 |
Details available
Insecure Data Storage of credentials has been found in /api_vedo/configuration/config.yml file in Vedo Suite version 2024.17. This file contains clear-text credentials, secret keys, and database information.
Published: 2025-08-06T00:00:00.000Z
Updated: 2026-07-05T01:07:34.461Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-51054 |
vulnerable | 2026-06-08 07:31:11.149257 |
Details available
Vedo Suite 2024.17 is vulnerable to Incorrect Access Control, which allows remote attackers to obtain a valid high privilege JWT token without prior authentication via sending an empty HTTP POST request to the /autologin/ API endpoint.
Published: 2025-08-06T00:00:00.000Z
Updated: 2026-07-05T01:07:30.697Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-51053 |
vulnerable | 2026-06-08 07:31:11.148943 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-51052 |
vulnerable | 2026-06-08 07:31:11.148323 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.