NetSight
medium6.3

CVE-2022-29062

Multiple relative path traversal vulnerabilities [CWE-23] in Fortinet FortiSOAR before 7.2.1 allows an authenticated attacker to write to the underlying filesy…

Impact

Multiple relative path traversal vulnerabilities [CWE-23] in Fortinet FortiSOAR before 7.2.1 allows an authenticated attacker to write to the underlying filesystem with nginx permissions via crafted HTTP requests.

Affected products

VendorProductAffected versions
FortinetFortisoar
from 7.0.0 before 7.0.3
Version 7.2.0

Weakness classification

References