Code injection in playbook code snippet step

Fortiguard Security Advisory

An improper control of generation of code (‘Code Injection’) vulnerability [CWE-94] in FortiSOAR may allow an authenticated attacker to execute arbitrary code on the host via a playbook code snippet.


Leave a Reply

Your email address will not be published. Required fields are marked *