Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-22641

A url redirection to untrusted site ('open redirect') in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7.0.0 through 7.0.9, FortiOS versions 6.4.0 through 6.4.12, FortiOS all versions 6.2, FortiOS all versions 6.0, FortiProxy version 7.2.0 through 7.2.2, FortiProxy version 7.0.0 through 7.0.8, FortiProxy all versions 2.0, FortiProxy all versions 1.2, FortiProxy all versions 1.1, FortiProxy all versions 1.0 allows an authenticated attacker to execute unauthorized code or commands via specially crafted requests.

Published

2023-04-11T17:15:08.100

Last Modified

2024-11-21T07:45:06.720

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.1 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-601
  • Type: Primary
    CWE-601
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application fortinet fortiproxy ≤ 2.0.12 Yes
Application fortinet fortiproxy < 7.0.9 Yes
Application fortinet fortiproxy < 7.2.3 Yes
Operating System fortinet fortios < 6.4.13 Yes
Operating System fortinet fortios < 7.0.11 Yes
Operating System fortinet fortios < 7.2.4 Yes
References