Skip to content
OpenAdvisories
Medium · 6.5 CVE-2021-41026 EUVD-2021-28179GHSA-pf39-475g-67qc

A relative path traversal in FortiWeb versions 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow an authenticated attacker to retrieve arbit…

Published Apr 6, 2022 · Updated Oct 22, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiWeb Category: Network devices

Description

A relative path traversal in FortiWeb versions 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow an authenticated attacker to retrieve arbitrary files from the underlying filesystem via specially crafted web requests.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiWeb FortiWeb 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 —

References