CVE-2023-37931
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Jan 14, 2025
CWE ID 89
Summary
CVE-2023-37931 is asql injection vulnerability [CWE-88] affecting FortiVoice Enterprise versions 7.0.0 through 7.0.1 and earlier than 6.4.8. An attacker who gains authentication can exploit this flaw by sending crafted HTTP or HTTPS requests, leading to blind sql injection attacks. The vulnerability allows the attacker to bypass input validations and extract or manipulate sensitive data from the system without causing visible errors. This poses a significant risk to data confidentiality and integrity.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Fortinet