Unrated severityNVD Advisory· Published Apr 4, 2025· Updated Apr 4, 2025
SSRF in GravityZone Console via DNS Truncation (VA-12634)
CVE-2025-2243
Description
A server-side request forgery (SSRF) vulnerability in Bitdefender GravityZone Console allows an attacker to bypass input validation logic using leading characters in DNS requests. Paired with other potential vulnerabilities, this bypass could be used for execution of third party code. This issue affects GravityZone Console: before 6.41.2.1.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<6.41.2.1+ 1 more
- (no CPE)range: <6.41.2.1
- (no CPE)range: 0
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.