Skip to content
OpenAdvisories
High · 8.8 CVE-2021-36186 EUVD-2021-22807GHSA-rv4v-vfgf-hg84

A stack-based buffer overflow in Fortinet FortiWeb version 6.4.0, version 6.3.15 and below, 6.2.5 and below allows attacker to execute unau…

Published Nov 2, 2021 · Updated Oct 25, 2024 · Assigned by fortinet

Description

A stack-based buffer overflow in Fortinet FortiWeb version 6.4.0, version 6.3.15 and below, 6.2.5 and below allows attacker to execute unauthorized code or commands via crafted HTTP requests

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiWeb FortiWeb 6.4.0, 6.3.15, 6.3.14, 6.3.13, 6.3.12, 6.3.11, 6.3.10, 6.3.9, 6.3.8, 6.3.7, 6.3.6, 6.3.5, 6.3.4, 6.3.3, 6.3.2, 6.3.1, 6.3.0, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0 —

References