Exploit público

Improper neutralization of special elements used in a template engine

CVSSv3 Score: 7.2 A Server-Side Template Injection vulnerability [CWE-1336] in FortiManager, FortiManager Cloud, FortiAnalyzer and FortiAnalyzer Cloud may allow an authenticated attacker with restricted privileges to execute unauthorized code or commands via a specially crafted request. Revised on 2026-11-10 00:00:00

Este es el aviso número 93 de Fortinet PSIRT en pwned.cl.

CategoríaFortinet PSIRT

Fuente: Fortinet PSIRT