CVE-2023-37932

An improper limitation of a pathname to a restricted directory 'path traversal' vulnerability CWE-22 in FortiVoiceEntreprise version 7.0.0 and before 6.4.7 allows an authenticated attacker to read arbitrary files from the system via sending crafted HTTP or HTTPS requests...

CVE-2023-37932

The CVE-2023-37932 entry describes a path traversal vulnerability in FortiVoiceEntreprise (Fortinet) affecting version 7.0.0 and earlier than 6.4.7. The issue stems from an improper limitation of a pathname to a restricted directory, allowing an authenticated attacker to read arbitrary files on t...