Description
A path traversal vulnerability in Vedo Suite 2024.17 allows remote authenticated attackers to read arbitrary filesystem files by exploiting an unsanitized 'file_get_contents()' function call in '/api_vedo/template'.
Medium · 6.5
CVE-2025-51052
EUVD-2025-23879GHSA-76mm-jg8w-rcj3
A path traversal vulnerability in Vedo Suite 2024.17 allows remote authenticated attackers to read arbitrary filesystem files by exploiting…
Published Aug 6, 2025 · Updated Jul 5, 2026 · Assigned by mitre