Skip to content
OpenAdvisories
Medium · 6.0 CVE-2025-22374 EUVD-2025-10676GHSA-2c34-w9r8-qhww

SSRF in CyberAudit-Web videx-legacy-ssl

Published Apr 10, 2025 · Updated Apr 10, 2025 · Assigned by DIVD

Description

A Server-Side Request Forgery (SSRF) vulnerability was discovered in the videx-legacy-ssl web service of Videx’s CyberAudit-Web, affecting versions prior to 1.1.3. This vulnerability has been patched in versions after 1.1.3. Leaving this vulnerability unpatched could lead to unauthorized access to the underlying infrastructure.

Affected products

VendorProductAffectedFixed
Videx CyberAudit-Web <= 1.1.3 —

References