CVE-2023-44251

8.8 highEPSS 0.8%Unsupported when assigned

High (8.8) in fortinet fortiwan. No vendor fix: the product was unsupported when the CVE was assigned. EPSS 0.8% chance of exploitation in the next 30 days.

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability [CWE-22] in Fortinet FortiWAN version 5.2.0 through 5.2.1 and version 5.1.1. through 5.1.2 may allow an authenticated attacker to read and delete arbitrary file of the system via crafted HTTP or HTTPs requests.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2023-12-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortiwan

References

https://fortiguard.com/psirt/FG-IR-23-265
https://fortiguard.com/psirt/FG-IR-23-265

Check your stack JSON