Threats tagged 'ghsa-q9c8-4m86-x4pp'

An unrestricted file upload vulnerability exists in Fortinet FortiAnalyzer and FortiManager products, including their cloud versions, across multiple versions. This flaw allows an authenticated administrator to upload arbitrary files via specially crafted requests, potentially leading to full compromise of confidentiality, integrity, and availability. The vulnerability affects FortiAnalyzer versions 7.2.0 through 8.0.1 and FortiManager versions 7.2.0 through 8.0.1, including corresponding cloud versions. The CVSS score is 7.2, indicating high severity.