Lucene search
PRIOn knowledge basePRION:CVE-2022-30299HistoryFeb 16, 2023 - 7:15 p.m.
Path traversal
2023-02-1619:15:00
PRIOn knowledge base
www.prio-n.com
7
path traversal
fortiweb 7.0.0
fortiweb 7.0.1
fortiweb 6.3.0
fortiweb 6.3.19
fortiweb 6.4
fortiweb 6.2
fortiweb 6.1
fortiweb 6.0
authenticated attacker
file retrieval
file system
web requests
A path traversal vulnerability [CWE-23] in the API of FortiWeb 7.0.0 through 7.0.1, 6.3.0 through 6.3.19, 6.4 all versions, 6.2 all versions, 6.1 all versions, 6.0 all versions may allow an authenticated attacker to retrieve specific parts of files from the underlying file system via specially crafted web requests.
References
Related
cve
cve
CVE-2022-30299
2023-02-16 19:15:12
nvd
nvd
CVE-2022-30299
2023-02-16 19:15:12
cvelist
cvelist
CVE-2022-30299
2023-02-16 18:05:34
nessus
nessus
Fortinet FortiWeb - Relative path traversal in web API (FG-IR-22-146)
2024-05-22 00:00:00
fortinet
fortinet
FortiWeb - Relative path traversal in web API
2023-02-16 00:00:00