CVE-2024-47572

critical · 9

An improper neutralization of formula elements in a csv file in Fortinet FortiSOAR 7.2.1 through 7.4.1 allows attacker to execute unauthorized code or commands via manipulating csv file

CVSS

0.6%

EPSS (exploit prob.)

46th

EPSS percentile

2025-01-14

Published

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Weaknesses

CWE-1236

Affected products

Vendor	Product	Affected versions
fortinet	fortisoar	>= 7.2.1, <= 7.2.2
fortinet	fortisoar	>= 7.3.0, < 7.3.3
fortinet	fortisoar	>= 7.4.0, < 7.4.2

Check a specific version with /api/v1/cve/match.

References

https://fortiguard.fortinet.com/psirt/FG-IR-24-210

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2024-47572