Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2025-2243

SSRF in GravityZone Console via DNS Truncation (VA-12634)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Bitdefender

Description

A server-side request forgery (SSRF) vulnerability in Bitdefender GravityZone Console allows an attacker to bypass input validation logic using leading characters in DNS requests. Paired with other potential vulnerabilities, this bypass could be used for execution of third party code. This issue affects GravityZone Console: before 6.41.2.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Bitdefender GravityZone Console

Default version status: unaffected

  • 0 to < 6.41.2-1affected

References