Path Traversal Vulnerability in Fortinet FortiWeb

CVE-2024-55597

What is CVE-2024-55597?

An improper limitation of pathname access in Fortinet FortiWeb versions 7.0.0 through 7.6.0 may allow an attacker to exploit path traversal vulnerabilities. This flaw enables attackers to craft specific requests that could lead to unauthorized code execution or command execution within a restricted directory. Organizations using impacted versions should apply necessary updates to mitigate this risk and fortify their security measures.

References