Lucene search
FortiGuard LabsFG-IR-21-180HistoryFeb 01, 2022 - 12:00 a.m.
FortiWeb - OS command injection due to direct input interpolation in API controllers
2022-02-0100:00:00
FortiGuard Labs
www.fortiguard.com
11
fortiweb
command injection
api
cwe-78
http requests
EPSS
0.001
Percentile
48.5%
An improper neutralization of special elements used in an OS command (‘OS Command Injection’) vulnerability [CWE-78] in FortiWeb may allow an authenticated attacker to execute arbitrary code or commands via crafted HTTP requests to ApplicationDelivery, JsonProtection and WebProtection controllers.
Related
cve
cve
CVE-2021-43073
2022-02-02 11:15:07
cnvd
cnvd
Fortinet FortiWeb OS Command Injection Vulnerability (CNVD-2022-09243)
2022-02-08 00:00:00
nvd
nvd
CVE-2021-43073
2022-02-02 11:15:07
cvelist
cvelist
CVE-2021-43073
2022-02-02 11:01:34
prion
prion
Command injection
2022-02-02 11:15:00
nessus
nessus