Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jcfw-h88c-w44g

Опубликовано: 12 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

A stack-based buffer overflow in Fortinet FortiOS 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, FortiProxy 7.4.0, 7.2.0 through 7.2.6, 7.0.0 through 7.0.12, 2.0.0 through 2.0.13 allows attacker to execute unauthorized code or commands via specially crafted HTTP requests.

A stack-based buffer overflow in Fortinet FortiOS 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, FortiProxy 7.4.0, 7.2.0 through 7.2.6, 7.0.0 through 7.0.12, 2.0.0 through 2.0.13 allows attacker to execute unauthorized code or commands via specially crafted HTTP requests.

EPSS

Процентиль: 33%
0.00131
Низкий

8.1 High

CVSS3

Дефекты

CWE-121

Связанные уязвимости

CVSS3: 8.1
nvd
почти 2 года назад

A stack-based buffer overflow in Fortinet FortiOS 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, FortiProxy 7.4.0, 7.2.0 through 7.2.6, 7.0.0 through 7.0.12, 2.0.0 through 2.0.13 allows attacker to execute unauthorized code or commands via specially crafted HTTP requests.

CVSS3: 8.1
fstec
почти 2 года назад

Уязвимость портала авторизации Captive Portal операционных систем FortiOS и прокси-сервера для защиты от интернет-атак FortiProxy, позволяющая нарушителю выполнить произвольный код или команды

EPSS

Процентиль: 33%
0.00131
Низкий

8.1 High

CVSS3

Дефекты

CWE-121