{"id":"CVE-2024-21753","revision":"468f9eae93f3441184b97e23bcde08b3","records":[{"revision":"468f9eae93f3441184b97e23bcde08b3","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2024-21753","aliases":[],"title":"A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.4, FortiClientEMS 7.0 all versions, FortiClientEMS 6.4 all versions, FortiClientEMS 06.02 all versio…","description":"A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.4, FortiClientEMS 7.0 all versions, FortiClientEMS 6.4 all versions, FortiClientEMS 06.02 all versions, FortiClientEMS 6.2 all versions, FortiClientEMS 06.00 all versions, FortiClientEMS 6.0 all versions, FortiClientEMS 01.02.02 through 01.02.05 allows attacker to perform a denial of service, read or write a limited number of files via specially crafted HTTP requests","state":0,"publishedAt":"2024-09-10T14:37:48.466+00:00","modifiedAt":"2026-10-22T13:48:34.257+00:00","affected":[{"ecosystem":"Vendor product","name":"FortiClientEMS","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Fortinet\",\n                    \"product\": \"FortiClientEMS\",\n                    \"cpes\": [\n                        \"cpe:2.3:a:fortinet:forticlientems:7.2.2:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:7.2.1:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:7.2.0:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:7.0.13:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:7.0.12:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:7.0.11:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:7.0.10:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:7.0.9:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:7.0.8:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:7.0.7:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:7.0.6:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:7.0.5:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:7.0.4:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:7.0.3:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:7.0.2:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:7.0.1:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:7.0.0:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:6.4.9:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:6.4.8:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:6.4.7:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:6.4.4:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:6.4.3:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:6.4.2:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:6.4.1:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:6.4.0:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:6.2.9:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:6.2.8:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:6.2.7:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:6.2.6:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:6.2.4:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:6.2.3:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:06.02.02:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:06.02.01:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:06.02.00:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:6.0.8:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:06.00.06:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:06.00.05:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:06.00.04:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:06.00.03:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:06.00.02:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:06.00.01:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:06.00.00:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:01.02.05:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:01.02.04:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:01.02.03:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:01.02.02:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:7.2.4:*:*:*:*:*:*:*\",\n                        \"cpe:2.3:a:fortinet:forticlientems:7.2.3:*:*:*:*:*:*:*\"\n                    ],\n                    \"defaultStatus\": \"unaffected\",\n                    \"versions\": [\n                        {\n                            \"versionType\": \"semver\",\n                            \"version\": \"7.2.0\",\n                            \"lessThanOrEqual\": \"7.2.4\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"versionType\": \"semver\",\n                            \"version\": \"7.0.0\",\n                            \"lessThanOrEqual\": \"7.0.13\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"versionType\": \"semver\",\n                            \"version\": \"6.4.7\",\n                            \"lessThanOrEqual\": \"6.4.9\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"versionType\": \"semver\",\n                            \"version\": \"6.4.0\",\n                            \"lessThanOrEqual\": \"6.4.4\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"versionType\": \"semver\",\n                            \"version\": \"6.2.6\",\n                            \"lessThanOrEqual\": \"6.2.9\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"versionType\": \"semver\",\n                            \"version\": \"6.2.3\",\n                            \"lessThanOrEqual\": \"6.2.4\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"versionType\": \"semver\",\n                            \"version\": \"06.02.00\",\n                            \"lessThanOrEqual\": \"06.02.02\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"6.0.8\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"versionType\": \"semver\",\n                            \"version\": \"06.00.00\",\n                            \"lessThanOrEqual\": \"06.00.06\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"versionType\": \"semver\",\n                            \"version\": \"01.02.02\",\n                            \"lessThanOrEqual\": \"01.02.05\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H/E:H/RL:U/RC:C","score":5.5,"severity":"MEDIUM"}],"references":["https://fortiguard.fortinet.com/psirt/FG-IR-23-362"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-21753","license":"CVE Program Terms of Use","key":"cve-program:CVE-2024-21753","identifiers":["CVE-2024-21753"]},"retained":false,"historicalAffected":[]}],"coverage":[]}