Improper limitation of a pathname to a restricted directory

Fortinet PSIRT feed containing multiple vulnerabilities across FortiOS, FortiProxy, FortiManager, FortiSandbox, FortiClient, FortiSIEM, FortiWeb, FortiSOAR, FortiPAM, FortiMonitorOnSight, FortiAnalyzer and related components. Issues range from low-severity denial of service and redirect flaws to critical unauthenticated authentication bypass, arbitrary file write, forged JWT authentication, sensitive information exposure, and code execution. The highest-priority item is an actively exploited path traversal and NULL-byte flaw allowing unauthenticated arbitrary file writes. The feed also cites a