CVE-2023-23780 | THREATINT

Description

A stack-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, Fortinet FortiWeb version 6.3.6 through 6.3.19, Fortinet FortiWeb 6.4 all versions allows attacker to escalation of privilege via specifically crafted HTTP requests.

PUBLISHED Reserved 2023-01-18 | Published 2023-02-16 | Updated 2024-10-23 | Assigner fortinet

HIGH: 7.6CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C

Problem types

Escalation of privilege

Product status

Default status

unaffected

7.0.0 (semver)

affected

6.4.0 (semver)

affected

6.3.6 (semver)

affected

References

fortiguard.com/psirt/FG-IR-22-118

cve.org (CVE-2023-23780)

nvd.nist.gov (CVE-2023-23780)

Download JSON