CVE-2022-30302

published 2022-07-19

CVE-2022-30302: Multiple relative path traversal vulnerabilities [CWE-23] in FortiDeceptor management interface 1.0.0 through 3.2.x, 3.3.0 through 3.3.2, 4.0.0 through 4.0.1…

Priority P3 51 high 8.1 CVSS 3.1

AV N AC L PR L UI N S U C N I H A H

Multiple relative path traversal vulnerabilities [CWE-23] in FortiDeceptor management interface 1.0.0 through 3.2.x, 3.3.0 through 3.3.2, 4.0.0 through 4.0.1 may allow a remote and authenticated attacker to retrieve and delete arbitrary files from the underlying filesystem via specially crafted web requests.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
fortinet	fortideceptor	—	—
fortinet	fortideceptor	—	—
fortinet	fortideceptor	—	—
fortinet	fortideceptor	1.0.0 – 3.2.2	—
fortinet	fortideceptor	3.3.0 – 3.3.2	—
fortinet	fortinet_fortideceptor	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-22