Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-11182 EUVD-2025-32678GHSA-88v8-3g84-5x8q

File Download in GTONE ChangeFlow

Published Oct 2, 2025 · Updated Oct 2, 2025 · Assigned by FSI

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Download of Code Without Integrity Check vulnerability in GTONE ChangeFlow allows Path Traversal.This issue affects ChangeFlow: All versions to v9.0.1.1.

Affected products

VendorProductAffectedFixed
GTONE ChangeFlow All versions – ≤ v9.0.1.1 —

References