CVE-2025-25257 | Fortinet FortiWeb up to 7.0.10/7.2.10/7.4.7/7.6.3 HTTP Request sql injection (FG-IR-25-151)

A vulnerability was found in Fortinet FortiWeb up to 7.0.10/7.2.10/7.4.7/7.6.3. It has been classified as critical. Affected is an unknown function of the component HTTP Request Handler. The manipulation leads to sql injection.

This vulnerability is traded as CVE-2025-25257. It is possible to launch the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.