CVE-2023-47542 MEDIUM

CVE-2023-47542

Vendor Fortinet
Product FortiManager
Weakness CWE-1336
Published April 9, 2024
Last update February 26, 2025
View on NVD All CVEs

CVSS base score

6.3/10
Attack vector Local
Attack complexity Low
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C

What the vulnerability does

01Description

A improper neutralization of special elements used in a template engine [CWE-1336] in FortiManager versions 7.4.1 and below, versions 7.2.4 and below, and 7.0.10 and below allows attacker to execute unauthorized code or commands via specially crafted templates.

Key dates

02Disclosure timeline

April 9, 2024 CVE published
February 26, 2025 Record updated