6.5
/ 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Description
A path traversal vulnerability in Vedo Suite 2024.17 allows remote authenticated attackers to read arbitrary filesystem files by exploiting an unsanitized 'file_get_contents()' function call in '/api_vedo/template'.
AI Analysis
A path traversal vulnerability in Vedo Suite 2024.17 allows remote authenticated attackers to read arbitrary files by exploiting an unsanitized function call. This could lead to unauthorized access of sensitive data.
Basic Information
ID
CVE-2025-51052
Published
Aug 6, 2025 at 21:15
CWE Classification
AI Assessment
AI Severity
Medium
Vendor
Vedo Suite Vendor
Product
Vedo Suite
Version
2024.17