CVE-2025-2116

Summary

CVE-2025-2116 is a newly disclosed vulnerability affecting the File Protocol Handler component in Beijing Founder Electronics' Founder Enjoys All-Media Acquisition and Editing System 3.0. This issue is significant due to the identified server-side request forgery (SSRF) vulnerability. The manipulation of the xyImgUrl argument in the /newsedit/newsedit/xy/imageProxy.do file exposes the system to remote attacks, allowing an attacker to issue unauthorized server-side requests. Although the vendor was notified about this disclosure, they have yet to respond or provide a patch, leaving affected systems at risk for exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.