FortinetOS Injection Vulnerability Lets Attackers Execute Unauthorised Code
https://cybersecuritynews.com/fortinet-os-command-injection-vulnerability/
Fortinet, a leading provider of cybersecurity solutions, has recently addressed a significant security vulnerability, CVE-2023-42788, classified as an OS command injection issue under CWE-78.
This vulnerability affects multiple products earlier including FortiManager, FortiAnalyzer, and today Fortinet confirmed that the vulnerability affects FortiAnalyzer-Cloud product, and poses a risk of unauthorized code execution by local attackers with low privileges.