CVE-2023-42784 – Fortinet FortiWeb HTTP/HTTPS Command Injection

CVE ID : CVE-2023-42784

Published : March 11, 2025, 3:15 p.m. | 1 hour, 27 minutes ago

Description : An improper handling of syntactically invalid structure in Fortinet FortiWeb at least verions 7.4.0 through 7.4.6 and 7.2.0 through 7.2.10 and 7.0.0 through 7.0.10 allows attacker to execute unauthorized code or commands via HTTP/S crafted requests.

Severity: 5.6 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CVE-2023-42784 – Fortinet FortiWeb HTTP/HTTPS Command Injection