Security Advisory

CVE-2023-37932

6.5
MEDIUM

Vulnerability Description

An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability [CWE-22] in FortiVoiceEntreprise version 7.0.0 and before 6.4.7 allows an authenticated attacker to read arbitrary files from the system via sending crafted HTTP or HTTPS requests
Published Date January 10, 2024
Official Source NIST NVD Advisory