Skip to content
Sign in
5.2 Medium

CVE-2024-48885 A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiRecorder…

Description

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiRecorder 7.2.0 through 7.2.1, FortiRecorder 7.0.0 through 7.0.4, FortiVoice 7.0.0 through 7.0.4, FortiVoice 6.4.0 through 6.4.9, FortiVoice 6.0 all versions, FortiWeb 7.6.0, FortiWeb 7.4.0 through 7.4.4, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions, FortiWeb 6.4 all versions allows attacker to escalate privilege via specially crafted packets.

Affected products and versions

Product Affected versions Fixed in
FortiRecorder 7.2 7.2.0 → 7.2.1 No fix stated
FortiRecorder 7.0 7.0.0 → 7.0.4 No fix stated
FortiWeb 7.6.0 No fix stated
FortiWeb 7.4 7.4.0 → 7.4.4 No fix stated
FortiWeb 7.2 7.2.0 → 7.2.12 No fix stated
FortiWeb 7.0 7.0.0 → 7.0.12 No fix stated
FortiWeb 6.4 6.4.0 → 6.4.3 No fix stated
FortiVoice 7.0 7.0.0 → 7.0.4 No fix stated
FortiVoice 6.4 6.4.0 → 6.4.9 No fix stated
Show the other branch
Product Affected versions Fixed in
FortiVoice 6.0 6.0.0 → 6.0.12 No fix stated

Other CVEs of FortiRecorder

The 14 CVEs of FortiRecorder →
CVE-2025-55717 A cleartext storage of sensitive information vulnerability [CWE-312] vulnerability in Fortinet FortiMail 7.6.0 through… 3.8 Low CVE-2024-47569 A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail… 4.2 Medium CVE-2024-40588 Multiple relative path traversal vulnerabilities [CWE-23] vulnerability in Fortinet FortiCamera 2.1 all versions,… 4.2 Medium CVE-2025-32756 Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability 9.6 Critical
Track this CVE