Description
Fortinet FortiNAC是美国飞塔（Fortinet）公司的一种零信任访问解决方案。
FortiNAC keyUpload zipslip 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://avd.aliyun.com/detail?id=AVD-2022-39952
https://zone.ci/aliyun/ali_highrisk/303619.html
https://cloud.tencent.com/developer/article/2403438
https://www.ddpoc.com/DVB-2024-6921.html
https://www.h3c.com/cn/d_202304/1830811_30003_0.htm
https://cn-sec.com/archives/1567103.html
https://nic.xjau.edu.cn/2023/0223/c1067a84408/page.htm
https://zhuanlan.zhihu.com/p/608698055
https://blog.51cto.com/u_15302226/10667354
https://developer.aliyun.com/article/1461421
https://www.fortiguard.com/psirt/FG-IR-22-300
https://horizon3.ai/attack-research/attack-blogs/fortinet-fortinac-cve-2022-39952-deep-dive-and-iocs/
https://www.picussecurity.com/resource/blog/cve-2022-39952-fortinac-remote-code-execution-exploit-explained
https://www.acunetix.com/vulnerabilities/web/fortinet-fortinac-rce-via-arbitrary-file-upload/
https://github.com/horizon3ai/CVE-2022-39952