VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 11, 2024· Updated Aug 2, 2024

CVE-2023-23775

CVE-2023-23775

Description

Multiple improper neutralization of special elements used in SQL commands ('SQL Injection') vulnerabilities [CWE-89] in FortiSOAR 7.2.0 and before 7.0.3 may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted strings parameters.

Affected products

2
  • Fortinet/Fortisoarllm-fuzzy2 versions
    >=7.0.3 <7.2.0+ 1 more
    • (no CPE)range: >=7.0.3 <7.2.0
    • (no CPE)range: 7.2.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.