Server-Side Request Forgery Vulnerability in Bitdefender GravityZone Console
CVE-2025-2243
6.9MEDIUM
What is CVE-2025-2243?
A security vulnerability present in Bitdefender GravityZone Console enables attackers to exploit server-side request forgery (SSRF) through the use of leading characters in DNS requests. This flaw affects versions prior to 6.41.2.1 and can allow malicious actors to bypass input validation mechanisms, potentially leading to the execution of unauthorized commands or third-party code when combined with other vulnerabilities.
Affected Version(s)
GravityZone Console 0 < 6.41.2-1
References
CVSS V4
Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Nicolas Verdier (@n1nj4sec)