CVE-2023-23775

FortiSOAR SQL injection (CVE-2023-23775) affects FortiSOAR 7.2.0 and earlier 7.0.3 due to improper neutralization of special elements in SQL commands. An authenticated attacker can potentially execute unauthorized code or commands via specially crafted string parameters, with risk described as hi...

CVE-2023-23775

Multiple improper neutralization of special elements used in SQL commands 'SQL Injection' vulnerabilities CWE-89 in FortiSOAR 7.2.0 and before 7.0.3 may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted strings parameters...