CVE Daily

CVE-2025-2243

A server-side request forgery (SSRF) vulnerability in Bitdefender GravityZone Co...

High CVSS 7.3

Overview

A server-side request forgery (SSRF) vulnerability in Bitdefender GravityZone Console allows an attacker to bypass input validation logic using leading characters in DNS requests. Paired with other potential vulnerabilities, this bypass could be used for execution of third party code. This issue affects GravityZone Console: before 6.41.2.1.

CWE: CWE-918 Published: 2025-04-04T10:15:16.313
Risk analysis

This vulnerability is rated 🟠 HIGH.

  • CVSS: 7.3 (HIGH)
  • Detected tags: ssrf (tag impact: MODERATE)

Recommended actions:

  • Deny access to internal/metadata addresses; use outbound allowlists.

Recommended tools

Tags