References https://nvd.nist.gov/vuln/detail/CVE-2023-33302 https://access.redhat.com/security/cve/cve-2023-33302 https://feedly.com/cve/CVE-2023-33302 https://cve.imfht.com/detail/CVE-2023-33302?lang=en https://github.com/advisories/ghsa-3rq3-6pw2-f97f https://osv.dev/vulnerability/CVE-2023-33302 https://vulners.com/nvd/NVD:CVE-2023-33302 https://stack.watch/vuln/CVE-2023-33302/ https://www.secpod.com/blog/fortiflaw-critical-stack-based-buffer-overflow-in-multiple-fortinet-products/ https://fortiguard.fortinet.com/psirt/FG-IR-23-165
Related VulnerabilitiesPoCCVE-2026-39808: Fortinet FortiSandbox - Command InjectionFortinet FortiSandbox /fortisandbox/job-detail/tracer-behavior 命令执行漏洞(CVE-2026-39808)PoCCVE-2026-21643: Fortinet FortiClientEMS 7.4.4 - SQL InjectionPoCCVE-2025-52970: Fortinet FortiWeb - Authentication Bypass to Admin PrivilegeFortinet FortiOS等 签名验证不当漏洞Fortinet FortiWeb /api/v2.0/cmdb/system/admin%3f/../../../../../cgi-bin/fwbcgi 权限绕过漏洞(CVE-2025-64446/CVE-2025-58034)Fortinet FortiWeb 需授权 命令注入漏洞Fortinet FortiWeb /api/v2.0/cmdb/system/admin%3f/../../../../../cgi-bin/fwbcgi 权限绕过漏洞(CVE-2025-64446)PoCFortinet FortiWeb 未授权身份验证绕过漏洞(CVE-2025-64446)