Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wqmg-f43p-5ccf

Опубликовано: 16 фев. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Multiple stack-based buffer overflow vulnerabilities [CWE-121] in the proxy daemon of FortiWeb 5.x all versions, 6.0.7 and below, 6.1.2 and below, 6.2.6 and below, 6.3.16 and below, 6.4 all versions may allow an unauthenticated remote attacker to achieve arbitrary code execution via specifically crafted HTTP requests.

Multiple stack-based buffer overflow vulnerabilities [CWE-121] in the proxy daemon of FortiWeb 5.x all versions, 6.0.7 and below, 6.1.2 and below, 6.2.6 and below, 6.3.16 and below, 6.4 all versions may allow an unauthenticated remote attacker to achieve arbitrary code execution via specifically crafted HTTP requests.

EPSS

Процентиль: 99%
0.83169
Высокий

9.8 Critical

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 9.8
nvd
почти 3 года назад

Multiple stack-based buffer overflow vulnerabilities [CWE-121] in the proxy daemon of FortiWeb 5.x all versions, 6.0.7 and below, 6.1.2 and below, 6.2.6 and below, 6.3.16 and below, 6.4 all versions may allow an unauthenticated remote attacker to achieve arbitrary code execution via specifically crafted HTTP requests.

CVSS3: 9.8
fstec
почти 3 года назад

Уязвимость межсетевого экрана веб-приложений FortiWeb, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 99%
0.83169
Высокий

9.8 Critical

CVSS3

Дефекты

CWE-787