Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9wp6-c53h-c89m

Опубликовано: 12 авг. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.7

Описание

A improper neutralization of special elements used in an os command ('os command injection') vulnerability [CWE-78] in Fortinet FortiWeb CLI version 7.6.0 through 7.6.3 and before 7.4.8 allows a privileged attacker to execute arbitrary code or command via crafted CLI commands.

A improper neutralization of special elements used in an os command ('os command injection') vulnerability [CWE-78] in Fortinet FortiWeb CLI version 7.6.0 through 7.6.3 and before 7.4.8 allows a privileged attacker to execute arbitrary code or command via crafted CLI commands.

EPSS

Процентиль: 8%
0.00029
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 6.7
nvd
6 месяцев назад

A improper neutralization of special elements used in an os command ('os command injection') vulnerability [CWE-78] in Fortinet FortiWeb CLI version 7.6.0 through 7.6.3 and before 7.4.8 allows a privileged attacker to execute arbitrary code or command via crafted CLI commands.

EPSS

Процентиль: 8%
0.00029
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-78