CVE-2023-36550

A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters...

CVE-2023-36550

A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters...

CVE-2023-36550

CVE-2023-36550 describes an OS command injection in Fortinet FortiWLM. Affected: FortiWLM 8.6.0–8.6.5 and 8.5.0–8.5.4. Root cause: improper neutralization of special elements in os command handling, enabling an attacker to run arbitrary commands by sending specially crafted HTTP GET parameters. I...