CVE-2017-3125

Description

An unauthenticated XSS vulnerability with FortiMail 5.0.0 - 5.2.9 and 5.3.0 - 5.3.8 could allow an attacker to execute arbitrary scripts in the security context of the browser of a victim logged in FortiMail, assuming the victim is social engineered into clicking an URL crafted by the attacker.

Reserved 2016-12-02 | Published 2017-04-12 | Updated 2024-10-25 | Assigner fortinet

Problem types

Information leak

Product status

5.0.0 -> 5.2.9, 5.3.0 -> 5.3.8
affected

References

fortiguard.com/psirt/FG-IR-17-011

www.securityfocus.com/bid/97474 (97474) vdb-entry

cve.org (CVE-2017-3125)

nvd.nist.gov (CVE-2017-3125)

Download JSON