CVE-2024-21760 — Fortinet / FortiSOAR

CVE-2024-21760

Fortinet / FortiSOAR PUBLISHED

Description (CNA)

An improper control of generation of code ('Code Injection') vulnerability [CWE-94] in FortiSOAR Connector FortiSOAR 7.4 all versions, 7.3 all versions, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow an authenticated attacker to execute arbitrary code on the host via a playbook code snippet.

Affected (CNA)

Vendor / product	Versions
Fortinet / FortiSOAR	affected 7.4.0 through 7.4.5; affected 7.3.0 through 7.3.3; affected 7.2.0 through 7.2.2; affected 7.0.0 through 7.0.3; affected 6.4.3 through 6.4.4; affected 6.4.0 through 6.4.1

CWE

CWE-94

References

https://fortiguard.fortinet.com/psirt/FG-IR-23-420

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.