PT-2025-40314
CVE-2025-11182
·
Published
2025-10-02
·
Updated
2026-10-12
Description by
CVSS 3.1
6.5
MediumMetricsAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
GTONE ChangeFlow versions through 9.0.1.1
Description
The software contains a flaw related to improper limitation of a pathname to a restricted directory, also known as 'Path Traversal', and allows for the download of code without integrity checks. This issue potentially allows unauthorized access and code execution.
Recommendations
Update GTONE ChangeFlow to a version later than 9.0.1.1.
Found an issue in the description? Have something to add? Feel free to write us 👾