Skip to content
OpenAdvisories
High · 8.8 CVE-2025-11221 EUVD-2025-32679GHSA-448j-jp63-mj88

Remote Code Execution in GTONE ChangeFlow

Published Oct 2, 2025 · Updated Oct 2, 2025 · Assigned by FSI

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Unrestricted Upload of File with Dangerous Type vulnerability in GTONE ChangeFlow allows Path Traversal, Accessing Functionality Not Properly Constrained by ACLs.This issue affects ChangeFlow: from All versions through v9.0.1.1.

Affected products

VendorProductAffectedFixed
GTONE ChangeFlow All versions – ≤ v9.0.1.1 —

References