Skip to content
OpenAdvisories
Unscored CVE-2017-7734 EUVD-2017-16709GHSA-46q2-9g95-42vx

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or comm…

Published Sep 12, 2017 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiOS Category: Network devices

Description

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via 'Comments' while saving Config Revisions.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiOS FortiOS versions 5.4.0 through 5.4.4 —

References