Unscored CVE-2014-8617 EUVD-2014-8454GHSA-4pvh-2q6p-wgf2

Cross-site scripting (XSS) vulnerability in the Web Action Quarantine Release feature in the WebGUI in Fortinet FortiMail before 4.3.9, 5.0…

Published Mar 4, 2015 · Updated Aug 6, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in the Web Action Quarantine Release feature in the WebGUI in Fortinet FortiMail before 4.3.9, 5.0.x before 5.0.8, 5.1.x before 5.1.5, and 5.2.x before 5.2.3 allows remote attackers to inject arbitrary web script or HTML via the release parameter to module/releasecontrol.

References

http://www.fortiguard.com/advisory/FG-IR-15-005/
20150302 XSS Reflected vulnerabilities in Fortimail version 5.2.1 (CVE-2014-8617) mailing-list
1031859 vdb-entry