CVE-2024-23108 | Fortinet FortiSIEM up to 6.5.2/6.6.3/6.7.8/7.0.2/7.1.1 API Request os command injection (FG-IR-23-130)

A vulnerability was found in Fortinet FortiSIEM up to 6.5.2/6.6.3/6.7.8/7.0.2/7.1.1. It has been classified as very critical. Affected is an unknown function of the component API Request Handler. The manipulation leads to os command injection.

This vulnerability is traded as CVE-2024-23108. It is possible to launch the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.