Unscored CVE-2015-3626 EUVD-2015-3668GHSA-7gwq-ghmm-7ggv

Cross-site scripting (XSS) vulnerability in the DHCP Monitor page in the Web User Interface (WebUI) in Fortinet FortiOS before 5.2.4 on For…

Published Aug 11, 2015 · Updated Aug 6, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in the DHCP Monitor page in the Web User Interface (WebUI) in Fortinet FortiOS before 5.2.4 on FortiGate devices allows remote attackers to inject arbitrary web script or HTML via a crafted hostname.

References

http://www.fortiguard.com/advisory/FG-IR-15-018/
http://www.fortiguard.com/advisory/dhcp-hostname-html-injection
1033144 vdb-entry
http://fortiguard.com/advisory/dhcp-hostname-html-injection