{"id":"CVE-2024-50569","published":"2025-02-11T16:09:00Z","modified":"2026-02-26T19:09:17Z","title":"A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb…","vendor":"Fortinet","product":"FortiWeb","tier":"tail","description":{"text":"A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb 7.0.0 through 7.6.0 allows attacker to execute unauthorized code or commands via crafted input.","provenance":"source","from":"CVE.org"},"cvss":{"score":6.3,"severity":"MEDIUM","version":"3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:C","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.01781,"percentile":0.78176,"provenance":"source"},"cwes":[{"id":"CWE-78","name":"Improper Neutralization of Special Elements used in an OS Command"}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-438","tags":[]}],"priority":{"score":20.0,"factors":[{"name":"EPSS percentile","points":15.64},{"name":"CVSS severity","points":4.41}]},"vendorSlug":"fortinet","affectedVersions":[{"vendor":"Fortinet","product":"FortiWeb","versions":["7.6.0",">= 7.4.0, <= 7.4.5",">= 7.2.0, <= 7.2.10",">= 7.0.0, <= 7.0.10"]}],"euvd":{"id":"EUVD-2025-4973","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-class-fortinet-fortiweb-cwe-78"}}