CVE-2019-25251

Publication date

2025-12-24 19:28:03

Family

VulnCheck

State

PUBLISHED

Description

Teradek VidiU Pro 3.0.3 contains a server-side request forgery vulnerability in the management interface that allows attackers to manipulate GET parameters url and xml_url. Attackers can exploit this flaw to bypass firewalls, initiate network enumeration, and potentially trigger external HTTP requests to arbitrary destinations.