Vulnerability · Published Apr 10, 2025 · Assigned by DIVD

CVE-2025-22374SSRF in CyberAudit-Web videx-legacy-ssl

Medium 6.0

In plain English

A medium-severity server-side request forgery in CyberAudit-Web from Videx Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 32% of all known vulnerabilities).

Severity (CVSS 4.0)6.0Medium

Exploit odds (30 days)0.4%top 68.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A Server-Side Request Forgery (SSRF) vulnerability was discovered in the videx-legacy-ssl web service of Videx’s CyberAudit-Web, affecting versions prior to 1.1.3. This vulnerability has been patched in versions after 1.1.3. Leaving this vulnerability unpatched could lead to unauthorized access to the underlying infrastructure.

Affected products (as reported)

Vendor	Product	Versions
Videx Inc.	CyberAudit-Web	<= 1.1.3

Weakness: CWE-918 · Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:L/SA:N/S:N/AU:Y/R:A/V:D/RE:L/U:Green

References

https://csirt.divd.nl/CVE-2025-22374 third-party-advisory
https://csirt.divd.nl/DIVD-2024-00043/ third-party-advisory