CVE-2023-23778: Path Traversal
A relative path traversal vulnerability [CWE-23] in FortiWeb version 7.0.1 and below, 6.4 all versions, 6.3 all versions, 6.2 all versions may allow an authenticated user to obtain unauthorized access to files and data via specifically crafted web requests.
Affected Software
Remediation
Patch Available
Information
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2023-23778.
What is the severity of the CVE-2023-23778 vulnerability?
The CVE-2023-23778 vulnerability has a severity of medium.
Which versions of FortiWeb are affected by CVE-2023-23778?
FortiWeb version 7.0.1 and below, 6.4 all versions, 6.3 all versions, and 6.2.3 to 6.2.7 are affected by CVE-2023-23778.
How can an authenticated user exploit CVE-2023-23778 vulnerability?
An authenticated user can exploit the CVE-2023-23778 vulnerability by sending specifically crafted web requests to obtain unauthorized access to files and data.
Is there a fix available for CVE-2023-23778?
Yes, an upgrade to a version that is not affected by CVE-2023-23778 is required to fix this vulnerability.