CVE-2023-48791

Summary

CVE-2023-48791 is a Command Injection vulnerability affecting FortiPortal versions 7.2.0 and below, as well as version 7.0.6. An attacker with authenticated R/W permissions can exploit this vulnerability by providing crafted arguments in the Schedule System Backup page field. This weakness arises from insufficient neutralization of special elements in commands, as indicated by the Common Vulnerabilities and Exposures (CWE) ID CWE-77. The successful exploitation grants the attacker the ability to execute unauthorized commands, posing a significant risk to affected systems.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.