CVE-2022-30300: Fortinet FortiWeb

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

A relative path traversal vulnerability [CWE-23] in FortiWeb 7.0.0 through 7.0.1, 6.3.6 through 6.3.18, 6.4 all versions may allow an authenticated attacker to obtain unauthorized access to files and data via specifically crafted HTTP GET requests.

Affected products

• Fortinet FortiWeb: from 6.3.6, before 6.3.19 (fixed in 6.3.19); version 6.4.0 only; version 6.4.1 only; version 6.4.2 only; version 7.0.0 only; version 7.0.1 only

Published 2023-02-16. Last modified 2026-06-17.