Description
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability [CWE-22] in FortiVoiceEntreprise version 7.0.0 and before 6.4.7 allows an authenticated attacker to read arbitrary files from the system via sending crafted HTTP or HTTPS requests
Published: 2024-01-10
Score: 6.2 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

Vendor Solution

Please upgrade to FortiVoice version 7.0.1 or above Please upgrade to FortiVoice version 6.4.8 or above

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2023-41785 An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability [CWE-22] in FortiVoiceEntreprise version 7.0.0 and before 6.4.7 allows an authenticated attacker to read arbitrary files from the system via sending crafted HTTP or HTTPS requests
References
Link Providers
https://fortiguard.com/psirt/FG-IR-23-219 cve-icon cve-icon
History

Thu, 17 Apr 2025 16:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Subscriptions

Fortinet Fortivoice
cve-icon MITRE

Status: PUBLISHED

Assigner: fortinet

Published:

Updated: 2025-04-17T15:45:35.341Z

Reserved: 2023-07-11T08:16:54.092Z

Link: CVE-2023-37932

cve-icon Vulnrichment

Updated: 2024-08-02T17:23:27.749Z

cve-icon NVD

Status : Modified

Published: 2024-01-10T18:15:45.570

Modified: 2024-11-21T08:12:29.797

Link: CVE-2023-37932

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses