CVE-2025-2245

MEDIO 5.3CVE-2025-2245 · Published 04/04/2025 · updated 17/06/2026

In breve

CVE-2025-2245 è una vulnerabilità MEDIO (CVSS 5.3) che riguarda gravityzone update server (bitdefender).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.32%, superiore al 25.1% delle vulnerabilità.
Correzione: aggiornare a 3.5.2.689 o successiva.

Package	Affected versions	Patched versions
gravityzone update server bitdefender	`< 3.5.2.689`	`3.5.2.689`

Description

A server-side request forgery (SSRF) vulnerability exists in the Bitdefender GravityZone Update Server when operating in Relay Mode. The HTTP proxy component on port 7074 uses a domain allowlist to restrict outbound requests, but fails to properly sanitize hostnames containing null-byte (%00) sequences. By crafting a request to a domain such as evil.com%00.bitdefender.com, an attacker can bypass the allowlist check, causing the proxy to forward requests to arbitrary external or internal systems.

References

bitdefender.com/support/security-advisories/server-side-request-forgery-in-gravityzone-update-server-using-null-bytes-va-12646 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free