Multiple heap-based buffer overflow vulnerabilities in...
High severity
Unreviewed
Published
Dec 9, 2021
to the GitHub Advisory Database
•
Updated Feb 1, 2023
Description
Published by the National Vulnerability Database
Dec 8, 2021
Published to the GitHub Advisory Database
Dec 9, 2021
Last updated
Feb 1, 2023
Multiple heap-based buffer overflow vulnerabilities in some web API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow a remote authenticated attacker to execute arbitrary code or commands via specifically crafted HTTP requests.
References