CVE-2024-50567

Summary

CVE-2024-50567 is a vulnerability affecting Fortinet FortiWeb 7.4.0 through 7.6.0. This issue involves an improper handling of special characters in operating system commands, allowing an attacker to execute unauthorized code or issue commands through specially crafted input (os command injection). Successful exploitation could lead to significant security implications, including potential data theft or system compromise. Fortinet strongly advises users to update their FortiWeb software to a patched version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.