Bitdefender GravityZone Console Server-Side Request Forgery Vulnerability
Vulnerability
A server-side request forgery (SSRF) vulnerability exists in Bitdefender GravityZone Console versions prior to 6.41.2.1. This vulnerability allows attackers to bypass input validation by sending crafted DNS requests with leading special characters. When combined with other potential vulnerabilities, this could lead to the execution of third-party code.
Impact
Exploitation of this vulnerability could allow for server-side request forgery, potentially leading to the execution of arbitrary third-party code.
Remediation
Users can update to Bitdefender GravityZone Console version 6.41.2-1 to address this vulnerability.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.