CVE-2024-47572 — Improper Neutralization of Formula Elements in a CSV File in Fortinet Fortisoar

CWE-1236 — Improper Neutralization of Formula Elements in a CSV File4 documents4 sources

Severity

8.0HIGHNVD

CNA9.0

EPSS

0.7%

top 27.14%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Fortinet Fortisoar

Timeline

PublishedJan 14

Description

An improper neutralization of formula elements in a csv file in Fortinet FortiSOAR 7.2.1 through 7.4.1 allows attacker to execute unauthorized code or commands via manipulating csv file

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:HExploitability: 2.1 | Impact: 5.9

Affected Packages2 packages

▶NVDfortinet/fortisoar7.3.0 — 7.3.3+2

▶CVEListV5fortinet/fortisoar7.4.0 — 7.4.1+2

🔴Vulnerability Details

GHSA

GHSA-rwr5-x2hj-vj32: An improper neutralization of formula elements in a csv file in Fortinet FortiSOAR 7↗2025-01-14

▶

CVEList

CVE-2024-47572: An improper neutralization of formula elements in a csv file in Fortinet FortiSOAR 7↗2025-01-14

▶

📋Vendor Advisories

Fortinet

An improper neutralization of formula elements in a csv file in Fortinet FortiSOAR 7.2.1 through 7.4.1 allows attacker t...↗2025-01-14

▶