CVE-2023-23775

Multiple improper neutralization of special elements used in SQL commands ('SQL Injection') vulnerabilities [CWE-89] in FortiSOAR 7.2.0 and before 7.0.3 may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted strings parameters.

Score

CVSS 3.1 8.8 High

Status

Analyzed - psirt@fortinet.com

Published

2024-06-11

Last modified

2024-08-02

Weaknesses

CWE-89

Affected products

• Fortisoar (Fortinet)

References

• https://fortiguard.com/psirt/FG-IR-22-448