Description
A local file inclusion (LFI) vulnerability in Vedo Suite version 2024.17 allows remote authenticated attackers to read arbitrary filesystem files by exploiting an unsanitized 'readfile()' function call in '/api_vedo/video/preview'.
Medium · 6.5
CVE-2025-51057
EUVD-2025-23887GHSA-73xg-xcp8-j983
A local file inclusion (LFI) vulnerability in Vedo Suite version 2024.17 allows remote authenticated attackers to read arbitrary filesystem…
Published Aug 6, 2025 · Updated Jul 5, 2026 · Assigned by mitre