← CVE Intelligence

CVE-2024-31495

Fortinet / FortiPortal PUBLISHED

Description (CNA)

A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiPortal versions 7.0.0 through 7.0.6 and version 7.2.0 allows privileged user to obtain unauthorized information via the report download functionality.

Affected (CNA)

Vendor / productVersions
Fortinet / FortiPortalaffected 7.2.0; affected 7.0.0 through 7.0.6

CWE

CWE-89

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.