Medium severity6.6NVD Advisory· Published Jan 14, 2025· Updated Jun 17, 2026
CVE-2024-48890
CVE-2024-48890
Description
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in FortiSOAR IMAP connector version 3.5.7 and below may allow an authenticated attacker to execute unauthorized code or commands via a specifically crafted playbook
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:fortinet:fortisoar_imap_connector:*:*:*:*:*:*:*:*Range: <3.5.8
- Range: <=3.5.7
Patches
Vulnerability mechanics
References
1- fortiguard.fortinet.com/psirt/FG-IR-24-415nvdVendor Advisory
News mentions
0No linked articles in our index yet.