CVE-2024-27785

CWE-12364 documents4 sources

Severity

6.5MEDIUM

EPSS

0.6%

top 29.48%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Fortinet Fortiaiops

Timeline

PublishedJul 9

Description

An improper neutralization of formula elements in a CSV File [CWE-1236] vulnerability in Fortinet FortiAIOps 2.0.0 may allow a remote authenticated attacker to execute arbitrary commands on a client's workstation via poisoned CSV reports.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:LExploitability: 2.3 | Impact: 2.7

Affected Packages2 packages

▶CVEListV5fortinet/fortiaiops2.0.0

▶NVDfortinet/fortiaiops2.0.0

🔴Vulnerability Details

GHSA

GHSA-5jfq-q2rx-7pxg: An improper neutralization of formula elements in a CSV File vulnerability [CWE-1236] in FortiAIOps version 2↗2024-07-09

▶

CVEList

CVE-2024-27785: An improper neutralization of formula elements in a CSV File [CWE-1236] vulnerability in Fortinet FortiAIOps 2↗2024-07-09

▶

📋Vendor Advisories

Fortinet

An improper neutralization of formula elements in a CSV File [CWE-1236] vulnerability in Fortinet FortiAIOps 2.0.0 may a...↗2024-07-09

▶