CVE-2017-7735

Description

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.2.0 through 5.2.11 and 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via the "Groups" input while creating or editing User Groups.

Reserved 2017-04-12 | Published 2017-09-12 | Updated 2024-10-25 | Assigner fortinet

Problem types

Execute unauthorized code or commands

Product status

FortiOS versions 5.2.0 through 5.2.11, and 5.4.0 through 5.4.4
affected

References

www.securitytracker.com/id/1038705 (1038705) vdb-entry

fortiguard.com/advisory/FG-IR-17-127

www.securityfocus.com/bid/99098 (99098) vdb-entry

cve.org (CVE-2017-7735)

nvd.nist.gov (CVE-2017-7735)

Download JSON