Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: GTONE Clear all filters
TI-2025-10278 CVE-2025-11221 · GHSA-448j-jp63-mj88

Remote Code Execution in GTONE ChangeFlow

Priority MEDIUM 42

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Unrestricted Upload of File with Dangerous Type vulnerability in GTONE ChangeFlow allows Path Traversal, Accessing Functionality Not Properl…

CVSS 4.0CRITICAL 9.4 Adjacent network No auth No interaction EPSS 0.00282 Published 2025-10-02 No fix listed CWE-22
TI-2025-10244 CVE-2025-11182 · GHSA-88v8-3g84-5x8q

File Download in GTONE ChangeFlow

Priority LOW 32

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Download of Code Without Integrity Check vulnerability in GTONE ChangeFlow allows Path Traversal.This issue affects ChangeFlow: All versions…

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00445 Published 2025-10-02 No fix listed CWE-22