CVE-2022-33876
CVE-2022-33876
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 5.1EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
06 Dec 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Multiple instances of improper input validation vulnerability in Fortinet FortiADC version 7.1.0, version 7.0.0 through 7.0.2 and version 6.2.4 and below allows an authenticated attacker to retrieve files with specific extension from the underlying Linux system via crafted HTTP requests.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:X/RC:C
Affected products
Fortinet · FortiADCWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →