CVE-2023-23784CWE-23

A relative path traversal in Fortinet FortiWeb version 7.0.0 through 7.0.2, FortiWeb version 6.3.6 through 6.3.20, FortiWeb 6.4 all versions allows attacker to…

Medium · published February 16, 2023

CVSS v3.1
5.6
EPSS
1%
Percentile
45.7
In the wild
Unconfirmed
What it is

A relative path traversal in Fortinet FortiWeb version 7.0.0 through 7.0.2, FortiWeb version 6.3.6 through 6.3.20, FortiWeb 6.4 all versions allows attacker to information disclosure via specially crafted web requests.

The record
Technical detail
CVSS v3.1
5.6 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:U/RC:C
CVSS v4.0
Not supplied
EPSS
0.00558 · 45.7th percentile
Weakness
CWE-23 · Relative Path Traversal
Published
2023-02-16T18:05Z
EPSS history
Timeline
  • 16 FEB 18:05Z
    A relative path traversal in Fortinet FortiWeb version 7.0.0 through 7.0.2, FortiWeb version 6.3.6 through 6.3.20, FortiWeb 6.4 all versions allows attacker to…
    cvelistv5