Skip to content
CVE PROGRAM SOURCE RECORD9.4 Critical

CVE-2025-11221

Remote Code Execution in GTONE ChangeFlow

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
FSI

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Unrestricted Upload of File with Dangerous Type vulnerability in GTONE ChangeFlow allows Path Traversal, Accessing Functionality Not Properly Constrained by ACLs.This issue affects ChangeFlow: from All versions through v9.0.1.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

GTONE ChangeFlow

Default version status: unaffected

  • All versions to ≤ v9.0.1.1affected

References