CVE-2021-36191

Publication date

2021-12-08 13:03:35

Family

fortinet

State

PUBLISHED

Description

A url redirection to untrusted site (open redirect) in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows attacker to use the device as proxy via crafted GET parameters in requests to error handlers