CVE-2023-23783 (published 2023-02-16T18:05:55.113Z)
A use of externally-controlled format string in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb 6.4 all versions allows attacker to execute unauthorized code or commands via specially crafted command arguments.
Affected products: Vendor: Fortinet
Product: FortiWeb
Versions: 7.0.0, 6.4.0