Vulnerabilities > Fortinet > Fortiextender Firmware > 3.0.2

DATE CVE VULNERABILITY TITLE RISK
2023-02-16 CVE-2022-27489 OS Command Injection vulnerability in Fortinet Fortiextender Firmware
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiExtender 7.0.0 through 7.0.3, 5.3.2, 4.2.4 and below allows attacker to execute unauthorized code or commands via crafted HTTP requests.
network
low complexity
fortinet CWE-78
7.2