CVE-2025-22374
SSRF in CyberAudit-Web videx-legacy-ssl
- State
- Published
- Severity
- 6.0 Medium
- Published
- Apr 10, 2025
- Updated
- Apr 10, 2025
- Reserved
- Jan 3, 2025
Description
A Server-Side Request Forgery (SSRF) vulnerability was discovered in the videx-legacy-ssl web service of Videx’s CyberAudit-Web, affecting versions prior to 1.1.3. This vulnerability has been patched in versions after 1.1.3. Leaving this vulnerability unpatched could lead to unauthorized access to the underlying infrastructure.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.0 Medium | CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:L/SA:N/S:N/AU:Y/R:A/V:D/RE:L/U:Green | DIVD |
Weaknesses
- CWE-918 Server-Side Request Forgery (SSRF)
Affected Products
| Product | Versions |
|---|---|
CyberAudit-WebVidex Inc. |
|
References
- https://csirt.divd.nl/CVE-2025-22374third-party-advisory
- https://csirt.divd.nl/DIVD-2024-00043/third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.