CVE-2025-51058 describes an SSRF vulnerability in Bottinelli Informatical Vedo Suite 2024.17. Specifically, the /api_vedo/video/preview endpoint improperly handles the "file" URL parameter, enabling authenticated remote attackers to induce the server to send HTTP requests to arbitrary external locations. This could potentially expose internal resources or lead to other indirect impacts. The vulnerability requires authentication and does not impact integrity or availability, but it has a high confidentiality impact according to the CVSS vector.

An authenticated attacker can exploit this SSRF vulnerability to make the server send HTTP requests to arbitrary remote URLs. This may allow the attacker to access internal systems or services that are not directly reachable, potentially leading to information disclosure. The vulnerability does not affect data integrity or availability. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the vulnerable endpoint to trusted users only and monitor for unusual request patterns involving the "file" parameter. Avoid exposing internal services that could be accessed via SSRF.