Vedo Suite Project vulnerabilities
We track 2 vulnerabilities in Vedo Suite Project products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 6, 2025.
2vulnerabilities
0critical
2high
0exploited
8.4average CVSS score
Latest Vedo Suite Project vulnerabilities
- 8.2 High severity
Vedo Suite: Unrestricted Upload of File with Dangerous Type
An unrestricted file upload vulnerability in Vedo Suite version 2024.17 allows remote authenticated attackers to write to arbitrary filesystem paths by exploiting the insecure 'uploadPreviews()' custom function in '/api_vedo/colorways_preview', ultimately resu
- 8.6 High severity
Vedo Suite: Cleartext Storage of Sensitive Information
Insecure Data Storage of credentials has been found in /api_vedo/configuration/config.yml file in Vedo Suite version 2024.17. This file contains clear-text credentials, secret keys, and database information.