A use of externally-controlled format string in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb 6.4 all versions allows attacker to execute unauthorized code or commands via specially crafted command arguments.
References
History

Wed, 23 Oct 2024 15:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: fortinet

Published: 2023-02-16T18:05:55.113Z

Updated: 2024-10-23T14:47:59.100Z

Reserved: 2023-01-18T08:30:21.308Z

Link: CVE-2023-23783

cve-icon Vulnrichment

Updated: 2024-08-02T10:42:25.864Z

cve-icon NVD

Status : Modified

Published: 2023-02-16T19:15:14.450

Modified: 2023-11-07T04:07:58.507

Link: CVE-2023-23783

cve-icon Redhat

No data.