FortiWeb - Path traversal via browse report CGI component

2023-02-1600:00:00

FortiGuard Labs

www.fortiguard.com

fortiweb

path traversal

vulnerability

cwe-23

authenticated user

web requests

files

data

0.001 Low

EPSS

Percentile

29.6%

JSON

A relative path traversal vulnerability [CWE-23] in FortiWeb may allow an authenticated user to obtain unauthorized access to files and data via specifically crafted web requests.

CPENameOperatorVersion
fortiwebeq7.0.1
fortiwebeq7.0.0
fortiwebeq6.4.2
fortiwebeq6.4.1
fortiwebeq6.4.0
fortiwebeq6.3.9
fortiwebeq6.3.8
fortiwebeq6.3.7
fortiwebeq6.3.6
fortiwebeq6.3.5

Name	Operator	Version
fortiweb	eq	7.0.1
fortiweb	eq	7.0.0
fortiweb	eq	6.4.2
fortiweb	eq	6.4.1
fortiweb	eq	6.4.0
fortiweb	eq	6.3.9
fortiweb	eq	6.3.8
fortiweb	eq	6.3.7
fortiweb	eq	6.3.6
fortiweb	eq	6.3.5

Rows per page:

1-10 of 351

0.001 Low

EPSS

Percentile

29.6%

JSON

Related for FG-IR-22-142