Threats tagged 'ghsa-2fj8-mgmh-6p6v'

An injection vulnerability exists in multiple versions of Fortinet FortiAnalyzer and FortiManager products, including their cloud variants. This flaw allows an authenticated administrator to read or write arbitrary files or execute unauthorized code or commands via specially crafted requests to the GUI. The vulnerability affects FortiAnalyzer versions 7.4.0 through 7.4.11, 7.6.0 through 7.6.7, and 8.0.0; FortiManager versions 7.4.0 through 7.4.11, 7.6.0 through 7.6.7, and 8.0.0; and their respective cloud versions. The CVSS v3.1 base score is 7.2, indicating a high severity impact. No public exploits or patches are currently documented in the provided data.