FortiSIEM - multiple path traversal vulnerabilities

A relative path traversal vulnerability [CWE-23] in FortiSIEM file upload components may allow an authenticated, low privileged user of the FortiSIEM GUI to escalate their privilege and replace arbitrary files on the underlying filesystem via specifically crafted HTTP requests.

components cwe file files filesystem file upload fortisiem gui http http requests low may path path traversal privilege privileged privileged user relative requests upload vulnerabilities vulnerability