Lucene search
PRIOn knowledge basePRION:CVE-2023-48791HistoryDec 13, 2023 - 7:15 a.m.
Command injection
2023-12-1307:15:00
PRIOn knowledge base
www.prio-n.com
2
command injection
fortiportal
cwe-77
remote attackers
unauthorized commands
crafted arguments
schedule system backup
An improper neutralization of special elements used in a command (‘Command Injection’) vulnerability [CWE-77] in FortiPortal version 7.2.0, version 7.0.6 and below may allow a remote authenticated attacker with at least R/W permission to execute unauthorized commands via specifically crafted arguments in the Schedule System Backup page field.
| CPE | Name | Operator | Version |
|---|---|---|---|
| fortiportal | ge | 7.0.0 | |
| fortiportal | le | 7.0.6 | |
| fortiportal | eq | 7.2.0 |
References
Related
cvelist
cvelist
CVE-2023-48791
2023-12-13 06:45:22
cve
cve
CVE-2023-48791
2023-12-13 07:15:28
nvd
nvd
CVE-2023-48791
2023-12-13 07:15:28