CVE-2024-21760: Code Injection

Q: What is the severity of CVE-2024-21760?

CVE-2024-21760 is considered a high severity vulnerability due to its capability to allow arbitrary code execution.

Q: How do I fix CVE-2024-21760?

To fix CVE-2024-21760, update FortiSOAR to the latest version provided by Fortinet that addresses this vulnerability.

Q: Who is affected by CVE-2024-21760?

CVE-2024-21760 affects all versions of FortiSOAR from 6.4 up to 7.4.

Q: What type of vulnerability is CVE-2024-21760?

CVE-2024-21760 is a code injection vulnerability classified under CWE-94.

Q: Can an unauthenticated user exploit CVE-2024-21760?

No, CVE-2024-21760 requires an authenticated user to exploit the vulnerability.

Published Mar 18, 2025

Updated

An improper control of generation of code ('Code Injection') vulnerability [CWE-94] in FortiSOAR Connector FortiSOAR 7.4 all versions, 7.3 all versions, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow an authenticated attacker to execute arbitrary code on the host via a playbook code snippet.

Affected Software

2 affected components

Fortinet FortiSOAR<=7.4, <=7.3, <=7.2, <=7.0, <=6.4

Fortinet FortiSOAR>=6.4.0<=7.4.5

Remediation

Information

Please upgrade to FortiSOAR version 7.5.0 or above

Event History

Mar 18, 2025

CVE Published

via MITRE·01:56 PM

Data Sourced

via MITRE·01:56 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·02:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-21760?

CVE-2024-21760 is considered a high severity vulnerability due to its capability to allow arbitrary code execution.

How do I fix CVE-2024-21760?

To fix CVE-2024-21760, update FortiSOAR to the latest version provided by Fortinet that addresses this vulnerability.

Who is affected by CVE-2024-21760?