Skip to content
fr Sign in
7.7 High

CVE-2024-21760 An improper control of generation of code ('Code Injection') vulnerability [CWE-94] in FortiSOAR Connector FortiSOAR 7.4…

Description

An improper control of generation of code ('Code Injection') vulnerability [CWE-94] in FortiSOAR Connector FortiSOAR 7.4 all versions, 7.3 all versions, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow an authenticated attacker to execute arbitrary code on the host via a playbook code snippet.

Affected products and versions

Product Affected versions Fixed in
FortiSOAR 7.4 7.4.0 → 7.4.5 No fix stated
FortiSOAR 7.3 7.3.0 → 7.3.3 No fix stated
FortiSOAR 7.2 7.2.0 → 7.2.2 No fix stated
FortiSOAR 7.0 7.0.0 → 7.0.3 No fix stated
FortiSOAR 6.4 6.4.0 → 6.4.4 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of FortiSOAR

The 15 CVEs of FortiSOAR →
CVE-2024-48892 A relative path traversal vulnerability [CWE-23] in FortiSOAR 7.6.0, 7.5.0 through 7.5.1, 7.4 all versions, 7.3 all… 6.4 Medium CVE-2025-32932 An Improper neutralization of input during web page generation ('cross-site scripting') vulnerability [CWE-79] in… 6.2 Medium CVE-2022-23439 A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison… 4.1 Medium CVE-2024-47572 An improper neutralization of formula elements in a csv file in Fortinet FortiSOAR 7.2.1 through 7.4.1 allows attacker… 8.3 High
Track this CVE