CVE-2021-43081 | THREATINT

Assigner	fortinet
Reserved	2021-10-28
Published	2022-05-11
Updated	2024-10-22

Description

An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiOS version 7.0.3 and below, 6.4.8 and below, 6.2.10 and below, 6.0.14 to 6.0.0. and in FortiProxy version 7.0.1 and below, 2.0.7 to 2.0.0 web filter override form may allow an unauthenticated attacker to perform an XSS attack via crafted HTTP GET requests.

MEDIUM: 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:X/RL:W/RC:X

Product status

FortiOS version 7.0.3 and below, 6.4.8 and below, 6.2.10 and below, 6.0.14 to 6.0.0. FortiProxy version 7.0.1 and below, 2.0.7 to 2.0.0.

affected

References

https://fortiguard.com/psirt/FG-IR-21-230

cve.org CVE-2021-43081

nvd.nist.gov CVE-2021-43081

Download JSON

https://cve.threatint.com/CVE/CVE-2021-43081

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat

Subscribe to our newsletter to learn more about our work.