CVE-2022-29061

An improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability CWE-78 in Fortinet FortiSOAR before 7.2.1 allows an authenticated attacker to execute unauthorized code or commands via crafted HTTP GET requests...

CVE-2022-29061

Fortinet FortiSOAR is affected by CVE-2022-29061, an OS Command Injection caused by improper neutralization of special elements. An authenticated attacker can execute arbitrary commands via crafted HTTP GET requests. Affected: FortiSOAR versions prior to 7.2.1. CVSSv3.1 base score 7.2 (HIGH); att...