Threats tagged 'ghsa-xhvc-jjj4-9gq2'

A classic buffer overflow vulnerability exists in Fortinet FortiExtender versions 7.6.0 through 7.6.1, 7.4.0 through 7.4.6, all versions of 7.2, and all versions of 7.0. This flaw allows an authenticated user to execute arbitrary code or commands by sending crafted CLI commands. The vulnerability has a CVSS 3.1 base score of 6.4, indicating medium severity. No public exploits or patches are currently documented.