What is GHSA-w4p8-qcm4-827w?

GHSA-w4p8-qcm4-827w is a security advisory published by GitHub Security Advisories with High severity. A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.2,...

Which CVE IDs does GHSA-w4p8-qcm4-827w cover?

GHSA-w4p8-qcm4-827w covers the following CVE IDs: CVE-2022-42476. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-w4p8-qcm4-827w?

GHSA-w4p8-qcm4-827w has a CVSS v3 base score of 8.2, published by GitHub Security Advisories.

GHSA-w4p8-qcm4-827wHighCVSS 8.2

A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.2,...

Vendor

GitHub Security Advisories

Published

March 7, 2023

Last Modified

October 22, 2026

🔗 CVE IDs covered (1)

CVE-2022-42476 →

📋 Description

A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.8 and before 6.4.11, FortiProxy version 7.2.0 through 7.2.2 and 7.0.0 through 7.0.8 allows privileged VDOM administrators to escalate their privileges to super admin of the box via crafted CLI requests.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2022-42476
https://fortiguard.com/psirt/FG-IR-22-401
https://github.com/advisories/GHSA-w4p8-qcm4-827w