Security Advisory

CVE-2021-43081

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-05-11 14:30:18
Last updated 2024-10-22 20:57:08
Assigner fortinet
State PUBLISHED

Description

An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiOS version 7.0.3 and below, 6.4.8 and below, 6.2.10 and below, 6.0.14 to 6.0.0. and in FortiProxy version 7.0.1 and below, 2.0.7 to 2.0.0 web filter override form may allow an unauthenticated attacker to perform an XSS attack via crafted HTTP GET requests.