CVE-2022-41335: 
FortiOS vulnerability analysis and mitigation

A relative path traversal vulnerability (CVE-2022-41335) was identified in multiple Fortinet products, including FortiOS versions 7.2.0 through 7.2.2, 7.0.0 through 7.0.8 and before 6.4.10, FortiProxy version 7.2.0 through 7.2.1, 7.0.0 through 7.0.7 and before 2.0.10, and FortiSwitchManager 7.2.0 and before 7.0.0. The vulnerability was assigned on September 23, 2022, and was publicly disclosed on February 16, 2023 (MITRE CVE, NVD).

The vulnerability is classified as a relative path traversal vulnerability [CWE-23]. It allows an authenticated attacker to read and write files on the underlying Linux system through specially crafted HTTP requests (MITRE CVE).

When exploited, this vulnerability enables authenticated attackers to both read and write files on the affected system's underlying Linux infrastructure, potentially leading to unauthorized access to sensitive information and system modification (NVD).

Fortinet has addressed this vulnerability through security updates. Users are advised to upgrade to the latest versions of the affected products (Fortiguard PSIRT).