CVE-2025-51057

The Vedo Suite version 2024.17 by Bottinelli Informatica contains a local file inclusion (LFI) vulnerability. The root cause is an unsanitized readfile() function call within the /api_vedo/video/preview API endpoint. This flaw allows remote authenticated attackers to read arbitrary filesystem fil...