UpHeron
All vulnerabilities

Servers and applications

CVE-2024-48885

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiRecorder 7.2.0 through 7.2.1, FortiRecorder 7.0.0 through 7.0.4, FortiVoice 7.0.0 through 7.0.4, FortiVoice 6.4.0 through 6.4.9, FortiVoice 6.0 all versions, FortiWeb 7.6.0, FortiWeb 7.4.0 through 7.4.4, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions, FortiWeb 6.4 all versions…

Severity
Critical 9.1
Published
16 Jan 2025
Last changed
8 Jul 2026
Added to UpHeron
1 Nov 2026
Fixed in
7.4.5
Sources
NVD

Affected software

SoftwareAffected versions
Fortinet FortiWebServers and applications · cpe:a:fortinet:fortiweb
  • From 6.4.0 before 7.4.5
  • Version 7.6.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-48885
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-48885