Lucene search
FortiGuard LabsFG-IR-21-166HistoryFeb 01, 2022 - 12:00 a.m.
FortiWeb - OS command injection due to unsafe input validation function
2022-02-0100:00:00
FortiGuard Labs
www.fortiguard.com
9
fortiweb
command injection
input validation
cwe-78
authenticated users
http get requests
wad configuration handlers
EPSS
0.001
Percentile
48.5%
An improper neutralization of special elements used in an OS command vulnerability (‘OS Command Injection’) [CWE-78] in FortiWeb may allow authenticated users to execute unauthorized code or commands via crafted HTTP GET requests to WAD configuration handlers.
Related
cve
cve
CVE-2021-41018
2022-02-02 12:15:08
cnvd
cnvd
Fortinet FortiWeb OS Command Injection Vulnerability
2022-02-08 00:00:00
cvelist
cvelist
CVE-2021-41018
2022-02-02 11:25:14
nvd
nvd
CVE-2021-41018
2022-02-02 12:15:08
prion
prion
Command injection
2022-02-02 12:15:00