Lucene search

K
fortinetFortiGuard LabsFG-IR-22-061
HistoryJan 03, 2023 - 12:00 a.m.

FortiADC - command injection in web interface

2023-01-0300:00:00
FortiGuard Labs
www.fortiguard.com
24
fortiadc
command injection
web gui
http requests
cwe-78
software security

EPSS

0.001

Percentile

49.1%

An improper neutralization of special elements used in an OS Command vulnerability [CWE-78] in FortiADC may allow an authenticated attacker with access to the web GUI to execute unauthorized code or commands via specifically crafted HTTP requests.

EPSS

0.001

Percentile

49.1%