Read the docs

GTONE

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

GTONE records in CISA KEV

No GTONE vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-10278 CVE-2025-11221 · GHSA-448j-jp63-mj88

Remote Code Execution in GTONE ChangeFlow

Priority MEDIUM 42

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Unrestricted Upload of File with Dangerous Type vulnerability in GTONE ChangeFlow allows Path Traversal, Accessing Functionality Not Properl…

CVSS 4.0CRITICAL 9.4 Adjacent network No auth No interaction EPSS 0.00282 Published 2025-10-02 No fix listed CWE-22
TI-2025-10244 CVE-2025-11182 · GHSA-88v8-3g84-5x8q

File Download in GTONE ChangeFlow

Priority LOW 32

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Download of Code Without Integrity Check vulnerability in GTONE ChangeFlow allows Path Traversal.This issue affects ChangeFlow: All versions…

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00445 Published 2025-10-02 No fix listed CWE-22
Open these records in search →