This vulnerability involves improper limitation of a pathname to a restricted directory (path traversal) in Fortinet FortiProxy and other Fortinet products. Exploitation may allow an attacker to execute unauthorized code or commands. The affected FortiProxy versions explicitly include 7.6.0, 7.4.0, 7.2.0, and 7.0.0 as representative affected versions. The CVSS 3.1 base score is 5.0 (medium severity) with attack vector as physical (AV:P), low attack complexity, high privileges required, no user interaction, unchanged scope, no confidentiality impact, high integrity and availability impact, and exploit code maturity is proof-of-concept with official fix remediation level. The vendor has released an official fix for this vulnerability.

Successful exploitation can lead to execution of unauthorized code or commands, impacting system integrity and availability. There is no confidentiality impact. The attack requires physical access and high privileges, limiting the ease of exploitation. No known exploits are currently in the wild.

An official fix is available from Fortinet. Users should apply the vendor-provided patches to affected FortiProxy versions to remediate this vulnerability. Since the remediation level is official-fix, applying the vendor patch is the recommended mitigation.