Improper limitation of a pathname to a restricted directory

Fortinet PSIRT feed containing multiple vulnerabilities across FortiOS, FortiProxy, FortiSandbox, FortiManager, FortiWeb, FortiSIEM, FortiClient, FortiSOAR, FortiPAM, FortiMonitorOnSight, FortiAnalyzer, and related products. The highest-risk entry is an actively exploited unauthenticated path traversal and NULL-byte flaw allowing arbitrary file writes. Other severe issues include authentication bypasses, forged JWT authentication, unauthenticated sensitive-information disclosure, remote code execution conditions, and certificate-validation weaknesses. The feed also references OpenSSL CVE-2022-