Skip to content
OpenAdvisories
High · 7.6 CVE-2023-23780 EUVD-2023-27866GHSA-x3xx-vqcp-f76g

A stack-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, Fortinet FortiWeb version 6.3.6 through 6.3.19, Fortinet Fo…

Published Feb 16, 2023 · Updated Oct 23, 2024 · Assigned by fortinet

Description

A stack-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, Fortinet FortiWeb version 6.3.6 through 6.3.19, Fortinet FortiWeb 6.4 all versions allows attacker to escalation of privilege via specifically crafted HTTP requests.

Affected products

VendorProductAffectedFixed
Fortinet FortiWeb 7.0.0 – ≤ 7.0.1, 6.4.0 – ≤ 6.4.2, 6.3.6 – ≤ 6.3.19 —

References