Skip to content
OpenAdvisories
High · 7.7 CVE-2021-32586 EUVD-2021-19426GHSA-rmxw-r4jv-r5xm

An improper input validation vulnerability in the web server CGI facilities of FortiMail before 7.0.1 may allow an unauthenticated attacker…

Published Mar 1, 2022 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiMail Category: Network devices

Description

An improper input validation vulnerability in the web server CGI facilities of FortiMail before 7.0.1 may allow an unauthenticated attacker to alter the environment of the underlying script interpreter via specifically crafted HTTP requests.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiMail FortiMail before 7.0.1 —

References