VDB
CVE-2023-23782
CVE-2023-23782
PUBLISHED
CVSS 7.1 HIGH
Reported by fortinet · Published February 16, 2023
A heap-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb version 6.3.0 through 6.3.19, FortiWeb 6.4 all versions, FortiWeb 6.2 all versions, FortiWeb 6.1 all versions allows attacker to escalation of privilege via specifically crafted arguments to existing commands.
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| fortiweb | fortinet | 7.0.2, 7.0.1, 6.4.2, 6.3.20, 6.3.19, 6.2.7, 6.1.3, 6.0.8 |
| FortiAnalyzer | Fortinet | 7.2.1, 7.0.4, 6.4.8, 6.2.9, 6.0.11 |
Risk scores
CVSS 3.1
7.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:R
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Fortinet | FortiWeb | 7.0.0, 6.4.0, 6.3.0 |
| Fortinet | FortiWeb | 7.0.0, 6.4.0, 6.3.0 |
Timeline
- Feb 16, 2023 CVE Published
- Feb 17, 2023 EPSS Score (30 in total, the first dated here)
- Oct 23, 2024 CVE Updated
- Jun 2, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2023-23782
vulnetix vdb fixes CVE-2023-23782Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2023-23782/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart