Approved changes feed: RSS · Atom

cpe:2.3:a:gtone:changeflow:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGtone (30cb67e5-f19d-59f3-8568-d9b8b948cd4a)
ProductChangeflow (cfdf3749-ffb2-5c28-82a7-b17de673f7fb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-11221 vulnerable 2026-06-08 07:02:28.279621 Remote Code Execution in GTONE ChangeFlow
HIGH (8.8)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Unrestricted Upload of File with Dangerous Type vulnerability in GTONE ChangeFlow allows Path Traversal, Accessing Functionality Not Properly Constrained by ACLs.This issue affects ChangeFlow: from All versions through v9.0.1.1.
Published: 2025-10-02T05:15:16.178Z
Updated: 2025-10-02T15:53:53.791Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11182 vulnerable 2026-06-08 07:02:28.193699 File Download in GTONE ChangeFlow
MEDIUM (6.5)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Download of Code Without Integrity Check vulnerability in GTONE ChangeFlow allows Path Traversal.This issue affects ChangeFlow: All versions to v9.0.1.1.
Published: 2025-10-02T05:15:06.469Z
Updated: 2025-10-02T15:54:05.142Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.