VYPR
← All advisories
High severity7.8NVD Advisory· Published Feb 16, 2023· Updated Jun 17, 2026

CVE-2023-23782

CVE-2023-23782

Description

A heap-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb version 6.3.0 through 6.3.19, FortiWeb 6.4 all versions, FortiWeb 6.2 all versions, FortiWeb 6.1 all versions allows attacker to escalation of privilege via specifically crafted arguments to existing commands.

Affected products

3
  • Fortinet/Fortiweb3 versions
    cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*range: >=6.0.0,<=6.2.7
    • (no CPE)range: 7.0.0 - 7.0.1, 6.3.0 - 6.3.19, 6.4, 6.2, 6.1
    • (no CPE)range: 7.0.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.