Threats tagged 'ghsa-mhh2-4p48-jq77'

An OS command injection vulnerability exists in multiple Fortinet products including FortiMail, FortiRecorder, and FortiVoice across various versions. This flaw allows an authenticated attacker to execute unauthorized commands via specially crafted HTTP requests. The vulnerability affects versions of FortiMail from 7.2 all versions through 8.0.1, FortiRecorder versions 7.0.0 through 7.6.2, and FortiVoice versions 7.0.0 through 8.0.1. The CVSS v3.1 score is 8.8, indicating high severity with impacts on confidentiality, integrity, and availability. No patch or remediation information is provided in the available data.