Skip to content
Sign in
8.3 High

CVE-2024-47572 An improper neutralization of formula elements in a csv file in Fortinet FortiSOAR 7.2.1 through 7.4.1 allows attacker…

Description

An improper neutralization of formula elements in a csv file in Fortinet FortiSOAR 7.2.1 through 7.4.1 allows attacker to execute unauthorized code or commands via manipulating csv file

Affected products and versions

Product Affected versions Fixed in
FortiSOAR 7.4 7.4.0 → 7.4.1 No fix stated
FortiSOAR 7.3 7.3.0 → 7.3.2 No fix stated
FortiSOAR 7.2 7.2.1 → 7.2.2 No fix stated

Other CVEs of FortiSOAR

The 15 CVEs of FortiSOAR →
CVE-2024-48892 A relative path traversal vulnerability [CWE-23] in FortiSOAR 7.6.0, 7.5.0 through 7.5.1, 7.4 all versions, 7.3 all… 6.4 Medium CVE-2025-32932 An Improper neutralization of input during web page generation ('cross-site scripting') vulnerability [CWE-79] in… 6.2 Medium CVE-2024-21760 An improper control of generation of code ('Code Injection') vulnerability [CWE-94] in FortiSOAR Connector FortiSOAR 7.4… 7.7 High CVE-2022-23439 A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison… 4.1 Medium
Track this CVE