Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vcxx-p2xf-cf5w

Опубликовано: 12 авг. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.7

Описание

An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiWeb version 7.6.0 through 7.6.3, 7.4.0 through 7.4.7, 7.2.0 through 7.2.10 and before 7.0.10 allows an authenticated privileged attacker to execute unauthorized code or commands via crafted CLI commands

An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiWeb version 7.6.0 through 7.6.3, 7.4.0 through 7.4.7, 7.2.0 through 7.2.10 and before 7.0.10 allows an authenticated privileged attacker to execute unauthorized code or commands via crafted CLI commands

EPSS

Процентиль: 6%
0.00024
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 6.7
nvd
6 месяцев назад

An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiWeb version 7.6.0 through 7.6.3, 7.4.0 through 7.4.7, 7.2.0 through 7.2.10 and before 7.0.10 allows an authenticated privileged attacker to execute unauthorized code or commands via crafted CLI commands

EPSS

Процентиль: 6%
0.00024
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-78