Relative Path Traversal Vulnerability in FortiSOAR by Fortinet

CVE-2024-48892

What is CVE-2024-48892?

A relative path traversal vulnerability exists in FortiSOAR versions 7.6.0, 7.5.0 through 7.5.1, and all versions of 7.4 and 7.3. This vulnerability allows an authenticated attacker to exploit the system by uploading a malicious solution pack, potentially granting access to read arbitrary files on the server. This could lead to unauthorized information disclosure, emphasizing the importance of timely updates and security measures in mitigating risks associated with this vulnerability.

References