CVE-2023-45584

A double free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.4.0 through 7.4.1, FortiProxy 7.2.0 through 7.2.7, FortiProxy 7.0.0 through 7.0.13 allows a privileged attacker to execute code or commands via crafted HTTP or HTTPs requests.

Score

CVSS 3.1 7.2 High

Status

Modified - psirt@fortinet.com

Published

2025-08-12

Last modified

2026-02-26

Weaknesses

CWE-415

Affected products

• Fortios (Fortinet)
• Fortipam (Fortinet)
• Fortiproxy (Fortinet)

References

• https://fortiguard.fortinet.com/psirt/FG-IR-23-209