VDB
BDU%3A2025-08439
BDU%3A2025-08439
PUBLISHED
CVSS 10 CRITICAL
Уязвимость функции get_fabric_user_by_token() компонента Fabric Connector межсетевого экрана веб-приложений FortiWeb, позволяющая нарушителю выполнить произвольный код или произвольные команды
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Fortinet Inc. | FortiWeb |
Timeline
- Jul 14, 2025 CVE Published
- Sep 24, 2025 CVE Updated
- Mar 22, 2026 Security Advisory
References
- https://fortiguard.fortinet.com/psirt/FG-IR-25-151 url
- https://www.securitylab.ru/news/561315.php url
- https://labs.watchtowr.com/pre-auth-sql-injection-to-rce-fortinet-fortiweb-fabric-connector-cve-2025-25257/?utm_source=Securitylab.ru url
- https://github.com/watchtowrlabs/watchTowr-vs-FortiWeb-CVE-2025-25257?ref=labs.watchtowr.com url
- https://docs.fortinet.com/document/fortiweb/7.6.2/administration-guide/685507/how-to-use-the-web-ui advisory