What is CVE-2023-23783?

CVE-2023-23783 is a medium-severity vulnerability in Fortinet Fortiweb, classified under Use of Externally-Controlled Format String. CVSS score: 6.7/10. Published 2023-02-16.

How severe is CVE-2023-23783?

Medium severity. CVSS v3 base score is 6.7 out of 10.

Vulnerability in Fortinet Fortiweb

CVE-2023-23783

A use of externally-controlled format string in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb 6.4 all versions allows attacker to execute unauthorized code or commands via specially crafted command arguments.

EPSS: 0.002 (16.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Fortinet Fortiweb — versions 7.0.0, 6.4.0

Weakness classification (CWE)

CWE-134 — Use of Externally-Controlled Format String

References

psirt@fortinet.com (Vendor Advisory)

Frequently asked questions

What is CVE-2023-23783?: CVE-2023-23783 is a medium-severity vulnerability in Fortinet Fortiweb, classified under Use of Externally-Controlled Format String. CVSS score: 6.7/10. Published 2023-02-16.
How severe is CVE-2023-23783?: Medium severity. CVSS v3 base score is 6.7 out of 10.