Unscored CVE-2020-12815 EUVD-2020-5098GHSA-qc23-rcpx-gm4f

An improper neutralization of input vulnerability in FortiTester before 3.9.0 may allow a remote authenticated attacker to inject script re…

Published Sep 24, 2020 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiTester Category: Network devices

Description

An improper neutralization of input vulnerability in FortiTester before 3.9.0 may allow a remote authenticated attacker to inject script related HTML tags via IPv4/IPv6 address fields.

Affected products

Vendor	Product	Affected	Fixed
Fortinet	Fortinet FortiTester	FortiTester before 3.9.0	—

References

https://fortiguard.com/advisory/FG-IR-20-054