Lucene search

K
fortinetFortiGuard LabsFG-IR-21-156
HistoryDec 07, 2021 - 12:00 a.m.

FortiWeb - Path traversal in API controller

2021-12-0700:00:00
FortiGuard Labs
www.fortiguard.com
34
fortiweb
path traversal
api
cwe-23
authenticated attacker
specially crafted web requests
filesystem

EPSS

0.001

Percentile

28.7%

Multiple relative path traversal vulnerabilities [CWE-23] in the API of FortiWeb may allow an authenticated attacker to retrieve arbitrary files from the underlying filesystem via specially crafted web requests.

EPSS

0.001

Percentile

28.7%

Related for FG-IR-21-156