CVE-2025-2116

MEDIUM

Beijing Founder Electronics Founder Enjoys All-Media Acquisition an...

Title source: llm
STIX 2.1

Description

A vulnerability has been found in Beijing Founder Electronics Founder Enjoys All-Media Acquisition and Editing System 3.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /newsedit/newsedit/xy/imageProxy.do of the component File Protocol Handler. The manipulation of the argument xyImgUrl leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

References (4)

Core 4
Core References
Permissions Required, VDB Entry vdb-entry technical-description
https://vuldb.com/?id.299011
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.299011
Permissions Required, VDB Entry third-party-advisory
https://vuldb.com/?submit.503719

Scores

CVSS v3 4.3
EPSS 0.0038
EPSS Percentile 29.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-918
Status published
Products (1)
Beijing Founder Electronics/Founder Enjoys All-Media Acquisition and Editing System 3.0
Published Mar 09, 2025
Tracked Since Feb 18, 2026