Fortinet FortiWeb Command injection in CLI backup functionality (FG-IR-22-131)

The version of FortiWeb installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-22-131 advisory. - An improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability CWE-78 in FortiWeb...

CVE-2023-23777

CVE-2023-23777 is an OS Command Injection in FortiWeb. Root cause: improper neutralization of special elements in OS commands, exploitable via crafted CLI backup parameters. Affected: FortiWeb 7.0.1 and earlier, 6.4 all versions, 6.3.18 and earlier. Impact: privileged attacker could execute arbit...