CVE-2023-42783

HIGH

Fortinet FortiWLM 8.2.2-8.6.5 - Relative Path Traversal via Crafted HTTP Requests

Title source: llm

Description

A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 and 8.4.2 through 8.4.0 and 8.3.2 through 8.3.0 and 8.2.2 allows attacker to read arbitrary files via crafted http requests.

References (1)

Core 1

Core References

Vendor Advisory

https://fortiguard.com/psirt/FG-IR-23-143

Scores

CVSS v3 7.5

EPSS 0.0090

EPSS Percentile 54.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-23

Status published

Products (8)

fortinet/fortiwlm 8.2.2

fortinet/fortiwlm 8.3.0

fortinet/fortiwlm 8.3.1

fortinet/fortiwlm 8.3.2

fortinet/fortiwlm 8.4.0

fortinet/fortiwlm 8.4.1

fortinet/fortiwlm 8.4.2

fortinet/fortiwlm 8.5.0 - 8.5.4

Published Nov 14, 2023

Tracked Since Feb 18, 2026