Skip to content
OpenAdvisories
Medium · 5.4 CVE-2021-32594 EUVD-2021-19434GHSA-m2qx-g49w-3pp8

An unrestricted file upload vulnerability in the web interface of FortiPortal 6.0.0 through 6.0.4, 5.3.0 through 5.3.5, 5.2.0 through 5.2.5…

Published Aug 4, 2021 · Updated Oct 25, 2024 · Assigned by fortinet

Description

An unrestricted file upload vulnerability in the web interface of FortiPortal 6.0.0 through 6.0.4, 5.3.0 through 5.3.5, 5.2.0 through 5.2.5, and 4.2.2 and earlier may allow a low-privileged user to potentially tamper with the underlying system's files via the upload of specifically crafted files.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiPortal FortiPortal 6.0.0 through 6.0.4, 5.3.0 through 5.3.5, 5.2.0 through 5.2.5, and 4.2.2 and earlier —

References