漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5 all versions, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.3, FortiSOAR on-premise 7.5 all versions, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow an authenticated remote attacker to perform path traversal attack via File Content Extraction actions.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Vulnerability Title
Fortinet FortiSOAR PaaS和Fortinet FortiSOAR on-premise 路径遍历漏洞
Vulnerability Description
Fortinet FortiSOAR PaaS和Fortinet FortiSOAR on-premise都是美国飞塔(Fortinet)公司的一款安全编排、自动化和响应软件。 Fortinet FortiSOAR PaaS和FortiSOAR on-premise存在路径遍历漏洞,该漏洞源于路径限制不当,可能导致经过身份验证的远程攻击者执行路径遍历攻击。以下版本受到影响:Fortinet FortiSOAR PaaS 7.6.3及之前版本、7.5版本、7.4版本、7.3版本、FortiSOAR on-p
CVSS Information
N/A
Vulnerability Type
N/A