2 matches found
CVE-2025-2245
A server-side request forgery SSRF vulnerability exists in the Bitdefender GravityZone Update Server when operating in Relay Mode. The HTTP proxy component on port 7074 uses a domain allowlist to restrict outbound requests, but fails to properly sanitize hostnames containing null-byte %00...
5.3CVSS5.9AI score0.00315EPSS
SaveExploits0References1
CVE-2025-2245: Server-Side Request Forgery (SSRF)
A server-side request forgery SSRF vulnerability exists in the Bitdefender GravityZone Update Server when operating in Relay Mode. The HTTP proxy component on port 7074 uses a domain allowlist to restrict outbound requests, but fails to properly sanitize hostnames containing null-byte %00...
6.9CVSS5.9AI score0.00315EPSS
SaveExploits0References1
20