{"version":"1.0","type":"rich","provider_name":"RootPwn","provider_url":"https://rootpwn.me","title":"FortiAnalyzer/FortiManager SQL Injection Enables Arbitrary File Read/Write","description":"Fortinet disclosed a SQL injection flaw (CWE‑89) that allows low‑privileged users to read or write arbitrary files on FortiAnalyzer, FortiManager, and their cloud variants. The vulnerability can lead to full device compromise and network exposure. Immediate patching and access restrictions are requi","url":"https://rootpwn.me/news/fortianalyzer-fortimanager-sql-injection-enables-arbitrary-file-read-write","thumbnail_url":"https://rootpwn.me/images/a3b06c7cd20e46ae8e5d36647b4f17a4.jpg","thumbnail_width":1600,"thumbnail_height":900}