CVE-2025-2245
Medium
Description
A server-side request forgery (SSRF) vulnerability exists in the Bitdefender GravityZone Update Server when operating in Relay Mode. The HTTP proxy component on port 7074 uses a domain allowlist to restrict outbound requests, but fails to properly sanitize hostnames containing null-byte (%00) sequences. By crafting a request to a domain such as evil.com%00.bitdefender.com, an attacker can bypass the allowlist check, causing the proxy to forward requests to arbitrary external or internal systems.
SeverityMedium
CVSS5.3
Exploit probability—
ProductBitdefender Gravityzone Update Server
PublishedApr 4, 2025
First seenApr 4, 2025
Weakness typeCWE-918Server-side request forgery (SSRF)
How to fix
Update
- bitdefender gravityzone_update_server3.5.2.689 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bitdefender gravityzone_update_server | v < 3.5.2.689 | 3.5.2.689 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.