Medium WID-SEC-2025-0533 3 CVEs

Fortinet FortiWeb: Mehrere Schwachstellen

Published Mar 11, 2025 · Updated Mar 11, 2025 · de-DE

Vendor: Fortinet Product: FortiWeb

Summary

Ein entfernter Angreifer kann mehrere Schwachstellen in Fortinet FortiWeb ausnutzen, um Sicherheitsvorkehrungen zu umgehen und Daten zu manipulieren.

Product

FortiWeb ist eine Web Application Firewall von Fortinet.

Vulnerabilities 3

Medium 5.5

CVE-2023-42784

An improper handling of syntactically invalid structure in Fortinet FortiWeb at least verions 7.4.0 through 7.4.6 and 7…

Fortinet FortiWeb Network devices

Mar 11, 2025
Medium 5.5

CVE-2024-55594

An improper handling of syntactically invalid structure in Fortinet FortiWeb at least vesrions 7.4.0 through 7.4.6 and …

Fortinet FortiWeb Network devices

Mar 14, 2025
Medium 5.2

CVE-2024-55597

A improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiWeb versions 7.0.0 th…

Fortinet FortiWeb Network devices

Mar 11, 2025

Revision history

2025-03-11 #1
Initiale Fassung

References

FortiGuard PSIRT Advisory FG-IR-23-115 vom 2025-03-11
https://www.fortiguard.com/psirt/FG-IR-23-115
FortiGuard PSIRT Advisory FG-IR-24-439 vom 2025-03-11
https://www.fortiguard.com/psirt/FG-IR-24-439