Path Traversal Vulnerability in FortiWeb by Fortinet

CVE-2025-25254

What is CVE-2025-25254?

The FortiWeb product by Fortinet suffers from a Path Traversal vulnerability, which permits authenticated administrators to manipulate the filesystem. Exploiting this issue may involve sending specially crafted requests, thereby gaining unauthorized access to sensitive directories. The susceptibility affects multiple versions of FortiWeb, specifically those in versions 7.6.2 and below, 7.4.6 and below, and all versions of 7.2 and 7.0. Immediate remediation is advised to prevent potential exploitation.

References