CVE-2024-21760

An improper control of generation of code 'Code Injection' vulnerability CWE-94 in FortiSOAR Connector FortiSOAR 7.4 all versions, 7.3 all versions, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow an authenticated attacker to execute arbitrary code on the host via a playbook code...

CVE-2024-21760: Improper Control of Generation of Code

An improper control of generation of code 'Code Injection' vulnerability CWE-94 in FortiSOAR Connector FortiSOAR 7.4 all versions, 7.3 all versions, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow an authenticated attacker to execute arbitrary code on the host via a playbook code...

PT-2025-11595

Name of the Vulnerable Software and Affected Versions FortiSOAR Connector FortiSOAR versions 6.4 through 7.4 Description An improper control of generation of code, also known as 'Code Injection', may allow an authenticated attacker to execute arbitrary code on the host via a playbook code snippet...