High · 7.2 CVE-2021-24015 EUVD-2021-10935GHSA-qgvx-8c9v-f6rh

An improper neutralization of special elements used in an OS Command vulnerability in the administrative interface of FortiMail before 6.4.…

Published Jul 12, 2021 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiMail Category: Network devices

Description

An improper neutralization of special elements used in an OS Command vulnerability in the administrative interface of FortiMail before 6.4.4 may allow an authenticated attacker to execute unauthorized commands via specifically crafted HTTP requests.

Affected products

Vendor	Product	Affected	Fixed
Fortinet	Fortinet FortiMail	FortiMail before 6.4.4	—

References

https://fortiguard.com/advisory/FG-IR-21-021