CVE-2023-34987

A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted HTTP get request parameters...

CVE-2023-34987

Fortinet FortiWLM is affected by an OS command injection caused by improper neutralization of special elements in OS command handling. Versions 8.6.0–8.6.5 and 8.5.0–8.5.4 are vulnerable to remote exploitation via specifically crafted HTTP GET parameters, enabling an attacker to execute unauthori...