Lucene search
FortiGuard LabsFG-IR-22-131HistoryFeb 16, 2023 - 12:00 a.m.
FortiWeb - Command injection in CLI backup functionality
2023-02-1600:00:00
FortiGuard Labs
www.fortiguard.com
25
fortiweb
command injection
cli backup
vulnerability
cwe-78
os command
bash commands
security
EPSS
0.001
Percentile
41.7%
An improper neutralization of special elements used in an OS command (‘OS Command Injection’) vulnerability [CWE-78] in FortiWeb may allow a privileged attacker to execute arbitrary bash commands via crafted cli backup parameters.
Related
nessus
nessus
nvd
nvd
CVE-2023-23777
2023-07-11 09:15:09
prion
prion
Command injection
2023-07-11 09:15:00
cvelist
cvelist
CVE-2023-23777
2023-07-11 08:49:41
cve
cve
CVE-2023-23777
2023-07-11 09:15:09