NetSight
medium5.7

CVE-2023-23784

A relative path traversal in Fortinet FortiWeb version 7.0.0 through 7.0.2, FortiWeb version 6.3.6 through 6.3.20, FortiWeb 6.4 all versions allows attacker to…

Impact

A relative path traversal in Fortinet FortiWeb version 7.0.0 through 7.0.2, FortiWeb version 6.3.6 through 6.3.20, FortiWeb 6.4 all versions allows attacker to information disclosure via specially crafted web requests.

Affected products

VendorProductAffected versions
FortinetFortiweb
from 6.3.6 before 6.3.21
from 6.4.0 through 6.4.2
from 7.0.0 before 7.0.3

Weakness classification

References