Description
Vedo Suite 2024.17 is vulnerable to Incorrect Access Control, which allows remote attackers to obtain a valid high privilege JWT token without prior authentication via sending an empty HTTP POST request to the /autologin/ API endpoint.
Medium · 6.5
CVE-2025-51054
EUVD-2025-23878GHSA-5ggx-chp6-c65f
Vedo Suite 2024.17 is vulnerable to Incorrect Access Control, which allows remote attackers to obtain a valid high privilege JWT token with…
Published Aug 6, 2025 · Updated Jul 5, 2026 · Assigned by mitre