Lucene search
FortiGuard LabsFG-IR-21-218HistoryMar 07, 2023 - 12:00 a.m.
FortiWeb and FortiRecorder - Arbitrary file read through command line pipe
2023-03-0700:00:00
FortiGuard Labs
www.fortiguard.com
13
fortiweb
fortirecorder
arbitrary file read
command line interpreter
cwe-792
authenticated user
EPSS
0
Percentile
13.3%
An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiRecorder and FortiWeb may allow an authenticated user to read arbitrary files via specially crafted command arguments.
Related
cnvd
cnvd
Fortinet FortiWeb and FortiRecorder Arbitrary File Read Vulnerability
2023-03-13 00:00:00
nessus
nessus
nvd
nvd
CVE-2022-22297
2023-03-07 17:15:11
cve
cve
CVE-2022-22297
2023-03-07 17:15:11
cvelist
cvelist
CVE-2022-22297
2023-03-07 16:04:48
prion
prion
Design/Logic Flaw
2023-03-07 17:15:00