CVE-2023-36633

—

CVSS 3.1

5.4 medium

EPSS

<1%p39

Published

Nov 14, 2023 (Nov 14, 2023)

Modified

Jun 17, 2026

Description

An improper authorization vulnerability [CWE-285] in FortiMail webmail version 7.2.0 through 7.2.2 and before 7.0.5 allows an authenticated attacker to see and modify the title of address book folders of other users via crafted HTTP or HTTPs requests.

Vendors: fortinet
Products: fortimail
Weakness: CWE-285, CWE-732
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.