Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-18292
HistoryMar 13, 2023 - 12:00 a.m.

Fortinet FortiWeb and FortiRecorder Arbitrary File Read Vulnerability

2023-03-1300:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
fortinet
fortiweb
fortirecorder
arbitrary file read
vulnerability
web application firewall
cross-site scripting
sql injection
cookie poisoning
schema poisoning
database security

EPSS

0

Percentile

13.3%

Fortinet FortiWeb is a web application layer firewall from Fortinet that blocks threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks, secures web applications and protects sensitive database content. and FortiRecorder are vulnerable to arbitrary file reading, which can be exploited by attackers to read arbitrary files via specially crafted command parameters.

EPSS

0

Percentile

13.3%

Related for CNVD-2023-18292