{"id":"CVE-2023-42783","aliases":["EUVD-2023-47213","GHSA-4rfh-v443-hvgh"],"status":"published","title":"A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5...","description":"A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 and 8.4.2 through 8.4.0 and 8.3.2 through 8.3.0 and 8.2.2 allows attacker to read arbitrary files via crafted http requests.","severity":{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:F/RL:X/RC:X","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00898,"percentile":0.59899,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-23"],"published":"2023-11-14T18:04:50Z","modified":"2026-06-17T06:24:29Z","products":[{"vendor":"fortinet","product":"fortiwlm"}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-143","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-42783"},{"url":"https://github.com/advisories/GHSA-4rfh-v443-hvgh"}],"sources":{"cve":[{"id":"CVE-2023-42783","description":"A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 and 8.4.2 through 8.4.0 and 8.3.2 through 8.3.0 and 8.2.2 allows attacker to read arbitrary files via crafted http requests.","status":"published","published":"2023-11-14T18:04:50.699Z","modified":"2024-08-30T18:27:39.061Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:F/RL:X/RC:X","level":"high","assessor":"cna"}],"cwes":["CWE-23"],"updated_at":"2026-11-02T14:35:18.16233Z"}],"euvd":[{"id":"EUVD-2023-47213","description":"A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 and 8.4.2 through 8.4.0 and 8.3.2 through 8.3.0 and 8.2.2 allows attacker to read arbitrary files via crafted http requests.","status":"published","published":"2023-11-14T18:04:50Z","modified":"2024-08-30T18:27:39Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:F/RL:X/RC:X","level":"high"}],"updated_at":"2026-11-03T00:56:06.59198Z"}],"ghsa":[{"id":"GHSA-4rfh-v443-hvgh","title":"A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5...","description":"A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 and 8.4.2 through 8.4.0 and 8.3.2 through 8.3.0 and 8.2.2 allows attacker to read arbitrary files via crafted http requests.","status":"published","published":"2023-11-14T18:30:29Z","modified":"2023-11-14T18:30:40Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-23"],"updated_at":"2026-11-02T14:55:01.181922Z"}],"nvd":[{"id":"CVE-2023-42783","description":"A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 and 8.4.2 through 8.4.0 and 8.3.2 through 8.3.0 and 8.2.2 allows attacker to read arbitrary files via crafted http requests.","status":"published","published":"2023-11-14T18:15:53.853Z","modified":"2026-06-17T06:24:29.573Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-23"],"updated_at":"2026-11-02T14:08:46.647045Z"}]}}