This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2025-11221 | BDVDB-2026-296344 Detail

GTONEChangeFlow

Description#

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Unrestricted Upload of File with Dangerous Type vulnerability in GTONE ChangeFlow allows Path Traversal, Accessing Functionality Not Properly Constrained by ACLs.This issue affects ChangeFlow: from All versions through v9.0.1.1.

Impact#

CAPEC-126 Path Traversal

Weaknesses#

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
  • CWE-434 Unrestricted Upload of File with Dangerous Type

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.