Lucene search

K
fortinetFortiGuard LabsFG-IR-22-254
HistoryMar 07, 2023 - 12:00 a.m.

FortiWeb - command injection in webserver

2023-03-0700:00:00
FortiGuard Labs
www.fortiguard.com
13
fortiweb
command injection
cwe-78
http requests
security vulnerability

EPSS

0.002

Percentile

56.6%

An improper neutralization of special elements used in an OS command vulnerability (‘OS Command Injection’) [CWE-78] in FortiWeb may allow authenticated users to execute unauthorized code or commands via specifically crafted HTTP requests.

EPSS

0.002

Percentile

56.6%

Related for FG-IR-22-254