Skip to content
OpenAdvisories
Medium · 6.3 CVE-2022-35847 EUVD-2022-38720GHSA-2359-j2hg-349m

An improper neutralization of special elements used in a template engine vulnerability [CWE-1336] in FortiSOAR management interface 7.2.0, …

Published Sep 6, 2022 · Updated Oct 22, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiSOAR Category: Network devices

Description

An improper neutralization of special elements used in a template engine vulnerability [CWE-1336] in FortiSOAR management interface 7.2.0, 7.0.0 through 7.0.3, 6.4.0 through 6.4.4 may allow a remote and authenticated attacker to execute arbitrary code via a crafted payload.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiSOAR FortiSOAR 7.2.0, 7.0.0 through 7.0.3, 6.4.0 through 6.4.4 —

References