A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb 7.0.0 through 7.6.0 allows attacker to execute unauthorized code or commands via crafted input.
References
| Link | Resource |
|---|---|
| https://fortiguard.fortinet.com/psirt/FG-IR-24-438 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
22 Jul 2025, 21:38
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.2 |
| References | () https://fortiguard.fortinet.com/psirt/FG-IR-24-438 - Vendor Advisory | |
| CPE | cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:* |
|
| First Time |
Fortinet fortiweb
Fortinet |
11 Feb 2025, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-02-11 17:15
Updated : 2025-07-22 21:38
NVD link : CVE-2024-50569
Mitre link : CVE-2024-50569
JSON object : View
Products Affected
fortinet
- fortiweb
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')