Skip to content
OpenAdvisories
Unscored CVE-2017-3129 EUVD-2017-12270GHSA-hmx8-w4r7-p975

A Cross-Site Scripting vulnerability in Fortinet FortiWeb versions 5.7.1 and below allows attacker to execute unauthorized code or commands…

Published May 26, 2017 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiWeb Category: Network devices

Description

A Cross-Site Scripting vulnerability in Fortinet FortiWeb versions 5.7.1 and below allows attacker to execute unauthorized code or commands via an improperly sanitized POST parameter in the FortiWeb Site Publisher feature.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiWeb FortiWeb versions 5.7.1 and below —

References