CVE-2023-48791

published 2023-12-13

CVE-2023-48791: An improper neutralization of special elements used in a command ('Command Injection') vulnerability [CWE-77] in FortiPortal version 7.2.0, version 7.0.6 and…

Priority P2 59 high 8.8 CVSS 3.1

AV N AC L PR L UI N S U C H I H A H

An improper neutralization of special elements used in a command ('Command Injection') vulnerability [CWE-77] in FortiPortal version 7.2.0, version 7.0.6 and below may allow a remote authenticated attacker with at least R/W permission to execute unauthorized commands via specifically crafted arguments in the Schedule System Backup page field.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
fortinet	fortiportal	—	—
fortinet	fortiportal	—	—
fortinet	fortiportal	7.0.0 – 7.0.6	—

Detection & IOCs extracted from sources · hover to see the quote

• → Monitor for command injection attempts targeting the Schedule System Backup page field in FortiPortal, specifically crafted arguments that include shell special elements/metacharacters ↗
• → Restrict detection scope to authenticated sessions with R/W permissions accessing the Schedule System Backup functionality in FortiPortal 7.2.0 and 7.0.6 and below ↗

• · Vulnerability affects FortiPortal version 7.2.0 and version 7.0.6 and below; ensure detection is scoped to these specific versions ↗
• · Exploitation requires the attacker to be authenticated with at least R/W permissions, reducing the attack surface to credentialed users only ↗

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-77