CVE-2025-2245
Server Side Request Forgery in GravityZone Update Server Using Null Bytes (VA-12646)
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Server Side Request Forgery in GravityZone Update Server Using Null Bytes (VA-12646)
A server-side request forgery (SSRF) vulnerability exists in the Bitdefender GravityZone Update Server when operating in Relay Mode. The HTTP proxy component on port 7074 uses a domain allowlist to restrict outbound requests, but fails to properly sanitize hostnames containing null-byte (%00) sequences. By crafting a request to a domain such as evil.com%00.bitdefender.com, an attacker can bypass the allowlist check, causing the proxy to forward requests to arbitrary external or internal systems.
Reserved 2025-03-12 | Published 2025-04-04 | Updated 2025-04-04 | Assigner BitdefenderCWE-918 Server-Side Request Forgery (SSRF)
Nicolas Verdier (@n1nj4sec)
www.bitdefender.com/...date-server-using-null-bytes-va-12646
Support options
