Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple improper neutralization of special elements used in SQL commands ('SQL Injection') vulnerabilities [CWE-89] in FortiSOAR 7.2.0 and before 7.0.3 may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted strings parameters.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Vulnerability Title
Fortinet FortiSOAR SQL注入漏洞
Vulnerability Description
Fortinet FortiSOAR是美国飞塔（Fortinet）公司的一种安全编排、自动化和响应 (SOAR) 解决方案。 Fortinet FortiSOAR 7.2.0 和 7.0.3 之前版本存在SQL注入漏洞，该漏洞源于对 SQL 命令中使用的特殊元素的不当中和，允许经过身份验证的攻击者通过特制的字符串参数执行未经授权的代码或命令。
CVSS Information
N/A
Vulnerability Type
N/A