CVE-2024-2223 Incorrect Regular Expression in GravityZone Update Server (VA-11465)
An attacker can exploit an incorrect regular expression to perform Server Side Request Forgery and reconfigure the relay in Bitdefender GravityZone Update Server.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-2223?
CVE-2024-2223 is a high-severity server-side request forgery vulnerability in Bitdefender Endpoint Security for Linux, published on 9 Apr 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An Incorrect Regular Expression vulnerability in Bitdefender GravityZone Update Server allows an attacker to cause a Server Side Request Forgery and reconfigure the relay. This issue affects the following products that include the vulnerable component:
Bitdefender Endpoint Security for Linux version 7.0.5.200089 Bitdefender Endpoint Security for Windows version 7.9.9.380 GravityZone Control Center (On Premises) version 6.36.1
Which versions are affected by CVE-2024-2223?
It affects 2 products.
Products include Bitdefender Endpoint Security, Bitdefender Gravityzone Control Center.
How do I fix CVE-2024-2223?
No fix has been published for CVE-2024-2223 yet. Limit exposure of the affected software until one is available.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2024-2223 being exploited?
There is no known exploitation of CVE-2024-2223 in the wild and no public exploit code.
Other vulnerabilities in Bitdefender Endpoint Security for Linux
- CVE-2020-8108 Insufficient client validation in Bitdefender Endpoint Security for Mac (VA-8759)
- CVE-2024-2224 Privilege Escalation via the GravityZone productManager UpdateServer.KitsManager API (VA-11466)
- CVE-2020-8097 Improper authentication vulnerability in Bitdefender Endpoint Security Tools and Endpoint Security SDK (VA-8646)
- CVE-2025-5317 Improper access restriction to critical folder in Bitdefender Endpoint Security Tools for Mac
Sources
Also known as GHSA-mvf3-qj92-4c7r.