Description
A protection mechanism failure in Fortinet FortiWeb 7.2.0 through 7.2.1, 7.0.0 through 7.0.6, 6.4.0 through 6.4.3, 6.3.6 through 6.3.23 allows attacker to execute unauthorized code or commands via specially crafted HTTP requests.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiWeb | 7.2.0 – ≤ 7.2.1, 7.0.0 – ≤ 7.0.6, 6.4.0 – ≤ 6.4.3, 6.3.6 – ≤ 6.3.23 | — |
Advisories 1
- WID-SEC-2023-2344 Fortinet FortiWeb: Schwachstelle ermöglicht Cross-Site Scripting und Cross-Site Request Forgery BSI CERT-Bund (WID) · Sep 13, 2023