Skip to content
OpenAdvisories
Unscored CVE-2017-7732 EUVD-2017-16707GHSA-8qvv-7624-87r2

A reflected Cross-Site Scripting (XSS) vulnerability in Fortinet FortiMail 5.1 and earlier, 5.2.0 through 5.2.9, and 5.3.0 through 5.3.9 cu…

Published Oct 26, 2017 · Updated Oct 25, 2024 · Assigned by fortinet

Description

A reflected Cross-Site Scripting (XSS) vulnerability in Fortinet FortiMail 5.1 and earlier, 5.2.0 through 5.2.9, and 5.3.0 through 5.3.9 customized pre-authentication webmail login page allows attacker to inject arbitrary web script or HTML via crafted HTTP requests.

References