FortiWLM - Path Traversal (CVE-2023-34990)
Description
A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specially crafted web requests.
psychologyCrowdSec Analysis
CVE-2023-34990 is a relative path traversal vulnerability in Fortinet FortiWLM versions 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 which allows attackers to execute unauthorized code or commands by sending specially crafted web requests. This remote code execution flaw could be exploited to gain control over the affected system, potentially leading to data breaches or further network compromise.
CrowdSec has been tracking this vulnerability and its exploits since 17th of June 2025.
CrowdSec has not observed any significant exploitation activity targeting CVE-2023-34990 across its network. As a result, no community-driven trend analysis is available for this vulnerability at this time.
Attackers exploit the /ems/cgi-bin/ezrf_lighttpd.cgi endpoint by abusing the imagename parameter with directory traversal sequences to access sensitive files on FortiWLM systems.
Full Intelligence Available
Connect your API key to access CrowdSec scores, exploit timelines, and attacker IPs.
| Event | Date |
|---|---|
| CVE Published | 2024-12-18 |
| Rule Released | 2025-06-17 |
| CrowdSec First Seen | 2025-08-05 |
Related Weaknesses
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.
The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.