An improper control of generation of code ('Code Injection') vulnerability [CWE-94] in FortiSOAR Connector FortiSOAR 7.4 all versions, 7.3 all versions, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow an authenticated attacker to execute arbitrary code on the host via a playbook code snippet.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://fortiguard.fortinet.com/psirt/FG-IR-23-420 | Vendor Advisory |
Configurations
History
24 Jul 2025, 19:17
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Fortinet fortisoar
Fortinet |
|
| CPE | cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:* | |
| References | () https://fortiguard.fortinet.com/psirt/FG-IR-23-420 - Vendor Advisory |
18 Mar 2025, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-03-18 14:15
Updated : 2025-07-24 19:17
NVD link : CVE-2024-21760
Mitre link : CVE-2024-21760
JSON object : View
Products Affected
fortinet
- fortisoar
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')