medium6.7
CVE-2023-23783
A use of externally-controlled format string in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb 6.4 all versions allows attacker to execute unauthorize…
Impact
A use of externally-controlled format string in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb 6.4 all versions allows attacker to execute unauthorized code or commands via specially crafted command arguments.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortiweb | from 6.4.0 before 6.4.2 from 7.0.0 before 7.0.2 |