CVE-2023-25611

—

CVSS 3.1

7.3 high

EPSS

<1%p18

Published

Mar 7, 2023 (Mar 7, 2023)

Modified

Jun 17, 2026

Description

A improper neutralization of formula elements in a CSV file vulnerability in Fortinet FortiAnalyzer 6.4.0 - 6.4.9, 7.0.0 - 7.0.5, and 7.2.0 - 7.2.1 allows local attacker to execute unauthorized code or commands via inserting spreadsheet formulas in macro names.

Vendors: fortinet
Products: fortianalyzer
Weakness: CWE-1236
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.