Skip to content
OpenAdvisories
High · 7.6 CVE-2023-27999 EUVD-2023-31724GHSA-q3c9-v322-7w9r

An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in FortiADC 7.2.0, 7.1.0 through 7.1.1 may allo…

Published May 3, 2023 · Updated Oct 23, 2024 · Assigned by fortinet

Description

An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in FortiADC 7.2.0, 7.1.0 through 7.1.1 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands.

Affected products

VendorProductAffectedFixed
Fortinet FortiADC 7.2.0, 7.1.0 – ≤ 7.1.1 —

References