CVE-2024-2223CWE-185

Incorrect Regular Expression in GravityZone Update Server (VA-11465)

High · published April 9, 2024

CVSS v3.1
8.1
EPSS
1%
Percentile
43.4
In the wild
Unconfirmed
What it is

An Incorrect Regular Expression vulnerability in Bitdefender GravityZone Update Server allows an attacker to cause a Server Side Request Forgery and reconfigure the relay. This issue affects the following products that include the vulnerable component:

Bitdefender Endpoint Security for Linux version 7.0.5.200089

Bitdefender Endpoint Security for  Windows version 7.9.9.380

GravityZone Control Center (On Premises) version 6.36.1

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00521 · 43.4th percentile
Weakness
CWE-185 · Incorrect Regular Expression
Published
2024-04-09T13:01Z
EPSS history
Timeline
  • 09 APR 13:01Z
    Incorrect Regular Expression in GravityZone Update Server (VA-11465)
    cvelistv5