GTONE ChangeFlow vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting GTONE ChangeFlow: 2 record(s), with affected versions and fixes.
CVE-2025-11221
High · 8.8
CWE-22 Oct 2, 2025
Remote Code Execution in GTONE ChangeFlow
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Unrestricted Upload of File with Dangerous Type vulnerability in GTONE ChangeFlow allows Path Traversal, Accessing Functionality Not Properly Constrained by ACLs.This issue affects ChangeFlow: from All versions through v9.0.1.1.
CVE-2025-11182
Medium · 6.5
CWE-22 Oct 2, 2025
File Download in GTONE ChangeFlow
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Download of Code Without Integrity Check vulnerability in GTONE ChangeFlow allows Path Traversal.This issue affects ChangeFlow: All versions to v9.0.1.1.