PT-2025-40314 · Unknown · Gtone Changeflow

Published 2025-10-02 · Updated 2025-10-02 · CVE-2025-11182

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions GTONE ChangeFlow versions through 9.0.1.1

Description The software contains a flaw related to improper limitation of a pathname to a restricted directory, also known as 'Path Traversal', and allows for the download of code without integrity checks. This issue potentially allows unauthorized access and code execution.

Recommendations Update GTONE ChangeFlow to a version later than 9.0.1.1.

Fix

Path traversal

Weakness Enumeration

CWE-22

CWE-494

Related Identifiers

CVE-2025-11182

Affected Products

Gtone Changeflow

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-11182 · Security Note
• https://twitter.com/CVEnew/status/1973626773138030996 · Twitter Post
• https://t.me/CVEtracker/33901 · Telegram Post
• https://t.me/cveNotify/137141 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1973680968658461001 · Twitter Post
• http://gtone.co.kr/kr/application-lifecycle-management.php · Note