PT-2025-32216 · Unknown · Vedo Suite

Davide Reggiani + 2 · Published 2025-08-06 · Updated 2025-10-09 · CVE-2025-51052

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Vedo Suite version 2024.17

Description A path traversal issue exists in Vedo Suite 2024.17 that may allow remote authenticated attackers to read arbitrary filesystem files. The issue is due to an unsanitized file get contents() function call within the /api vedo/template API endpoint.

Recommendations As a temporary workaround, consider restricting access to the /api vedo/template API endpoint until a fix is available.

Exploit

Fix

Relative Path Traversal

Weakness Enumeration

CWE-23

Related Identifiers

CVE-2025-51052

Affected Products

Vedo Suite

References · 8

• 🔥 https://github.com/jacopoaugelli/vedo-suite-exploits · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-51052 · Security Note
• https://osv.dev/vulnerability/CVE-2025-51052 · Vendor Advisory
• https://t.me/cveNotify/138037 · Telegram Post
• http://vedo.com · Note
• https://t.me/CVEtracker/29389 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1953265362645987363 · Twitter Post
• https://twitter.com/CVEnew/status/1953195911368360090 · Twitter Post