CVE-2025-2116: Beijing Founder Electronics Founder Enjoys All-Media Acquisition and Editing System File Protocol imageProxy.do server-side request forgery
First published: Sun Mar 09 2025(Updated: )
A vulnerability has been found in Beijing Founder Electronics Founder Enjoys All-Media Acquisition and Editing System 3.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /newsedit/newsedit/xy/imageProxy.do of the component File Protocol Handler. The manipulation of the argument xyImgUrl leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
| Affected Software | Affected Version | How to fix |
|---|---|---|
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-2116?
CVE-2025-2116 has been classified as problematic due to its impact on an unknown functionality of the affected system.
How do I fix CVE-2025-2116?
To remediate CVE-2025-2116, update the Beijing Founder Electronics Founder Enjoys All-Media Acquisition and Editing System to the latest version provided by the vendor.
What systems are affected by CVE-2025-2116?
CVE-2025-2116 affects the Beijing Founder Electronics Founder Enjoys All-Media Acquisition and Editing System 3.0.
What is the nature of the vulnerability in CVE-2025-2116?
CVE-2025-2116 involves a flaw in the file /newsedit/newsedit/xy/imageProxy.do of the component File Processing.
Is there a known exploit for CVE-2025-2116?
As of now, there is no public information regarding an exploit for CVE-2025-2116.
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/source
- agent/last-modified-date
- agent/severity
- agent/title
- agent/first-publish-date
- agent/weakness
- agent/type
- agent/description
- agent/event
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- vendor/beijing founder electronics