Vedo Suite vulnerabilities

2 known vulnerabilities in Vedo Suite from Vedo Suite Project. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  Vedo Suite: Unrestricted Upload of File with Dangerous Type

  CVE-2025-51056Aug 6, 2025Vedo Suite Project

  An unrestricted file upload vulnerability in Vedo Suite version 2024.17 allows remote authenticated attackers to write to arbitrary filesystem paths by exploiting the insecure 'uploadPreviews()' custom function in '/api_vedo/colorways_preview', ultimately resu

• 8.6 High severity

  Vedo Suite: Cleartext Storage of Sensitive Information

  CVE-2025-51055Aug 6, 2025Vedo Suite Project

  Insecure Data Storage of credentials has been found in /api_vedo/configuration/config.yml file in Vedo Suite version 2024.17. This file contains clear-text credentials, secret keys, and database information.