CVE-2024-46664

4.9 mediumEPSS 0.5%

Medium (4.9) in fortinet fortirecorder. EPSS 0.5% chance of exploitation in the next 30 days.

A relative path traversal in Fortinet FortiRecorder [CWE-23] version 7.2.0 through 7.2.1 and before 7.0.4 allows a privileged attacker to read files from the underlying filesystem via crafted HTTP or HTTPs requests.

Severity

CVSS 3.1

4.9 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-31)
CWEs: CWE-22, CWE-23
Published: 2025-01-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortirecorder

References

https://fortiguard.fortinet.com/psirt/FG-IR-24-310

Check your stack JSON