CVE-2023-23782

🗓️ 16 Feb 2023 18:05:57Reported by fortinetType

Heap-based buffer overflow in Fortinet FortiWeb allows privilege escalation via crafted arguments

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2023-23782	16 Feb 202322:17	–	circl
CNNVD	Fortinet FortiWeb 缓冲区错误漏洞	16 Feb 202300:00	–	cnnvd
CNVD	Fortinet FortiWeb Buffer Overflow Vulnerability (CNVD-2023-18301)	20 Feb 202300:00	–	cnvd
Cvelist	CVE-2023-23782	16 Feb 202318:05	–	cvelist
EUVD	EUVD-2023-27868	3 Oct 202520:07	–	euvd
Fortinet	FortiWeb - Heap based overflow in CLI	16 Feb 202300:00	–	fortinet
Tenable Nessus	Fortinet FortiWeb Heap based overflow in CLI (FG-IR-22-111)	22 May 202400:00	–	nessus
NCSC	Vulnerabilities fixed in FortiNet FortiWeb	17 Feb 202300:00	–	ncsc
NVD	CVE-2023-23782	16 Feb 202319:15	–	nvd
Prion	Heap overflow	16 Feb 202319:15	–	prion

NVD

Node

fortinet fortiwebRange6.0.0–6.2.7

fortinet fortiwebRange6.3.0–6.3.20

fortinet fortiwebRange6.4.0–6.4.2

fortinet fortiwebRange7.0.0–7.0.2

[
  {
    "vendor": "Fortinet",
    "product": "FortiWeb",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "versionType": "semver",
        "version": "7.0.0",
        "lessThanOrEqual": "7.0.1",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.4.0",
        "lessThanOrEqual": "6.4.2",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.3.0",
        "lessThanOrEqual": "6.3.19",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.2.0",
        "lessThanOrEqual": "6.2.7",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.1.0",
        "lessThanOrEqual": "6.1.3",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.0.0",
        "lessThanOrEqual": "6.0.8",
        "status": "affected"
      }
    ]
  }
]

Source	Link
fortiguard	www.fortiguard.com/psirt/FG-IR-22-111

21 Nov 2024 07:46Current

8High risk

Vulners AI Score8

CVSS 3.17.8

EPSS0.0014

SSVC