CVE-2022-30300 in FortiWeb

Sumário

de MITRE • 16/02/2023

A relative path traversal vulnerability [CWE-23] in FortiWeb 7.0.0 through 7.0.1, 6.3.6 through 6.3.18, 6.4 all versions may allow an authenticated attacker to obtain unauthorized access to files and data via specifically crafted HTTP GET requests.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsável: Fortinet, Inc.
• Reservar: 06/05/2022
• Divulgação: 16/02/2023
• Moderação: aceite
• Entrada: VDB-221225
• CPE: pronto
• CWE: CWE-23 (confirmado)
• CVSS: 6.5 (CNA)
• EPSS: 0.00802
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-30300
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-30300
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-30300/