| Package | Affected versions | Patched versions |
|---|---|---|
| fortianalyzer | = 7.2.0≥ 6.4.0, < 7.0.7 | 7.0.7 |
An improper input validation vulnerability [CWE-20] in FortiAnalyzer version 7.2.1 and below, version 7.0.6 and below, 6.4 all versions may allow an authenticated attacker to disclose file system information via custom dataset SQL queries.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free