CVE-2025-52970 Information
Aug 13, 2025
cve
Description
A improper handling of parameters in Fortinet FortiWeb versions 7.6.3 and below versions 7.4.7 and below versions 7.2.10 and below and 7.0.10 and below may allow an unauthenticated remote attacker with non-public information pertaining to the device and targeted user to gain admin privileges on the device via a specially crafted request.
Reference
https://fortiguard.fortinet.com/psirt/FG-IR-25-448
Related CNNVD
CNNVD-202508-1265 (Published: 2025-08-12)
Share on: