CVE-2023-37932

An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability [CWE-22] in FortiVoiceEntreprise version 7.0.0 and before 6.4.7 allows an authenticated attacker to read arbitrary files from the system via sending crafted HTTP or HTTPS requests

Score

CVSS 3.1 6.5 Medium

Status

Modified - psirt@fortinet.com

Published

2024-01-10

Last modified

2025-04-17

Weaknesses

CWE-22

Affected products

• Fortivoice (Fortinet)

References

• https://fortiguard.com/psirt/FG-IR-23-219