← Database

CVE-2024-6980

CRITICAL CVSS: 9.8 Published: 2024-07-31 Modified: 2026-06-17

Description

A verbose error handling issue in the proxy service implemented in the GravityZone Update Server allows an attacker to cause a server-side request forgery. This issue only affects GravityZone Console versions before 6.38.1-5 running only on premise.

Affected Platforms

Bitdefender Gravityzone

Weakness Type

CWE-209, CWE-918

References