Skip to content
OpenAdvisories
High · 7.1 CVE-2021-3823 EUVD-2021-27072GHSA-pv3r-p93c-qvjx

Path traversal vulnerability in Bitdefender GravitZone Update Server in relay mode

Published Oct 28, 2021 · Updated Sep 16, 2024 · Assigned by Bitdefender

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the UpdateServer component of Bitdefender GravityZone allows an attacker to execute arbitrary code on vulnerable instances. This issue affects: Bitdefender GravityZone versions prior to 3.3.8.249.

Affected products

VendorProductAffectedFixed
Bitdefender GravityZone Update Server unspecified – < 3.3.8.249 3.3.8.249

References