This vulnerability in Fortinet FortiWeb versions 7.0.10 through 8.0.2 involves a relative path traversal that could enable an attacker with high privileges to execute unauthorized code or commands. The CVSS vector indicates the attack requires local access with low complexity and no user interaction, but privileges are high. The impact includes high confidentiality, integrity, and availability consequences. Fortinet has released an official fix to address this vulnerability.

Successful exploitation could lead to unauthorized code or command execution on the affected FortiWeb device, potentially compromising confidentiality, integrity, and availability of the system. The attacker must have high privileges and local access to exploit this vulnerability. No known exploits are currently reported in the wild.

An official fix is available from Fortinet to remediate this vulnerability. Users should apply the vendor-provided patches promptly to mitigate the risk. Since this is not a cloud service, remediation depends on the customer applying the update. There are no indications that no action is required or that the issue is already mitigated without patching.