NetSight
high7.2

CVE-2024-50567

An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb 7.4.0 through 7.6.0 allows attacker to execu…

Impact

An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb 7.4.0 through 7.6.0 allows attacker to execute unauthorized code or commands via crafted input.

Affected products

VendorProductAffected versions
FortinetFortiweb
from 7.0.0 before 7.4.6
Version 7.6.0

Weakness classification

References