imPC@ndo IT

Tracker / CVE-2024-55597

CVE-2024-55597

Medium 5.5

A improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiWeb versions 7.0.0 through 7.6.0 allows attacker to execute unauthorized code or commands via crafted requests.

Affected products and versions

fortinet fortiweb
fortinet fortiweb · 7.0.0 → 7.4.6

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References