CVE-2023-48788

CVE-2023-48788 is a critical SQL injection vulnerability discovered in Fortinet's FortiClient Enterprise Management Server (EMS) software. The flaw, resulting from an improper neutralization of special elements used in SQL, could potentially allow an attacker to execute arbitrary commands on the system. Fortinet has since addressed this issue and implemented a fix to ensure the security of their EMS solution. The discovery and resolution of CVE-2023-48788 have drawn significant attention from various parties. Horizon3's Attack Team announced plans to publish technical details and a proof-of-concept (PoC) exploit for the vulnerability within a week of the fix. Concurrently, there were attempts to sell a PoC for the same vulnerability for less than $300 via GitHub, raising concerns about potential misuse of the information. As of March 14, 2024, the vulnerability has been fixed by Fortinet. However, the situation underscores the importance of vigilance and prompt action in addressing software vulnerabilities. With technical details and PoCs potentially circulating, users of Fortinet's FortiClient EMS software are strongly advised to ensure they have applied the latest updates to mitigate any risk associated with CVE-2023-48788.