Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qgc2-ccpf-f2fm

Опубликовано: 09 дек. 2021
Источник: github
Github: Не прошло ревью

Описание

Multiple heap-based buffer overflow vulnerabilities in some web API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow a remote authenticated attacker to execute arbitrary code or commands via specifically crafted HTTP requests.

Multiple heap-based buffer overflow vulnerabilities in some web API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow a remote authenticated attacker to execute arbitrary code or commands via specifically crafted HTTP requests.

EPSS

Процентиль: 75%
0.00883
Низкий

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 8.8
nvd
около 4 лет назад

Multiple heap-based buffer overflow vulnerabilities in some web API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow a remote authenticated attacker to execute arbitrary code or commands via specifically crafted HTTP requests.

EPSS

Процентиль: 75%
0.00883
Низкий

Дефекты

CWE-787