CVE-2024-21760

Name of the Vulnerable Software and Affected Versions FortiSOAR Connector FortiSOAR versions 6.4 through 7.4

Description An improper control of generation of code, also known as 'Code Injection', may allow an authenticated attacker to execute arbitrary code on the host via a playbook code snippet.

Recommendations For FortiSOAR Connector FortiSOAR versions 6.4 through 7.4, consider disabling the execution of playbook code snippets until a patch is available to prevent potential code injection attacks.