HTTP: Fortinet FortiWeb HTTP Content Routing Directory Traversal
This signature detects attempts to exploit a known vulnerability against Fortinet FortiWeb. A successful attack can lead to directory traversal and arbitrary code execution.
Extended Description
An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] in FortiWeb version 7.6.2 and below, version 7.4.6 and below, 7.2 all versions, 7.0 all versions endpoint may allow an authenticated admin to access and modify the filesystem via crafted requests.
References
CVE: CVE-2025-25254
Short Name
HTTP:DIR:FORTINET-CNT-RT
Severity
Major
Recommended
False
Recommended Action
Drop
Category
HTTP
Keywords
CVE-2025-25254 Content Directory FortiWeb Fortinet HTTP Routing Traversal
Release Date
06/19/2025
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3819
False Positive
Unknown