5.2
Medium
CVE-2022-22297 An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line…
Description
An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiWeb version 6.4.0 through 6.4.1, FortiWeb version 6.3.0 through 6.3.17, FortiWeb all versions 6.2, FortiWeb all versions 6.1, FortiWeb all versions 6.0, FortiRecorder version 6.4.0 through 6.4.3, FortiRecorder all versions 6.0, FortiRecorder all versions 2.7 may allow an authenticated user to read arbitrary files via specially crafted command arguments.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiRecorder 6.4 | 6.4.0 → 6.4.3 | No fix stated |
| FortiRecorder 6.0 | 6.0.0 → 6.0.12 | No fix stated |
| FortiRecorder 2.7 | 2.7.0 → 2.7.7 | No fix stated |
| FortiWeb 6.4 | 6.4.0 → 6.4.1 | No fix stated |
| FortiWeb 6.3 | 6.3.0 → 6.3.17 | No fix stated |
| FortiWeb 6.2 | 6.2.0 → 6.2.7 | No fix stated |
| FortiWeb 6.1 | 6.1.0 → 6.1.3 | No fix stated |
| FortiWeb 6.0 | 6.0.0 → 6.0.8 | No fix stated |
References
- fortiguard.com fortiguard.com
Timeline
- Published
- Last modified
Other CVEs of FortiRecorder
The 14 CVEs of FortiRecorder →
CVE-2025-55717
A cleartext storage of sensitive information vulnerability [CWE-312] vulnerability in Fortinet FortiMail 7.6.0 through…
3.8
Low
CVE-2024-47569
A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail…
4.2
Medium
CVE-2024-40588
Multiple relative path traversal vulnerabilities [CWE-23] vulnerability in Fortinet FortiCamera 2.1 all versions,…
4.2
Medium
CVE-2025-32756
Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability
9.6
Critical