CVE-2023-46713

Published: Dec 13, 2023Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

An improper output neutralization for logs in Fortinet FortiWeb 6.2.0 - 6.2.8, 6.3.0 - 6.3.23, 7.0.0 - 7.0.9, 7.2.0 - 7.2.5 and 7.4.0 may allow an attacker to forge traffic logs via a crafted URL of the web application.

Affected (5)

Products: Fortinet: Fortiweb

Fortinet

1 product

Fortiweb

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Fortinet Fortiweb	From 6.2.0 to 6.2.8
Fortinet Fortiweb	From 6.3.0 to 6.3.23
Fortinet Fortiweb	From 7.0.0 to 7.0.9
Fortinet Fortiweb	From 7.2.0 to 7.2.5
Fortinet Fortiweb	Version 7.4.0

Related CWEs

CWE-117

Improper Output Neutralization for Logs

The product does not neutralize or incorrectly neutralizes output that is written to logs.

References (2)

https://fortiguard.com/psirt/FG-IR-23-256

Source: psirt@fortinet.com

Vendor Advisory

https://fortiguard.com/psirt/FG-IR-23-256

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.