描述
A stack-based buffer overflow vulnerability [CWE-121] in FortiWeb version 7.0.1 and below, 6.4 all versions, version 6.3.19 and below SAML server configuration may allow an authenticated attacker to achieve arbitrary code execution via specifically crafted XML files.
AI分析AI驱动
受影响产品
fortinetfortiweb
fortinetfortiweb
fortinetfortiweb
参考资料
- https://fortiguard.com/psirt/FG-IR-22-151Vendor Advisory
- https://fortiguard.com/psirt/FG-IR-22-151Vendor Advisory