Fortinet FortiWeb OS Command Injection Vulnerability (CNVD-2022-09243)

Fortinet FortiWeb is a web application layer firewall from Fortinet that blocks threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning, and other attacks to secure web applications and protect sensitive database content. A security vulnerability exists that stems from allowing unauthorized code in the executing operating system (command insertion in the operating system) or commands issued via personally designed HTTP requests. No detailed vulnerability details are available at this time.