Open Redirect Vulnerability in Fortinet FortiWeb
CVE-2021-36191
4.1MEDIUM
What is CVE-2021-36191?
An open redirect vulnerability in Fortinet FortiWeb versions 6.4.1 and below, and 6.3.15 and below allows attackers to redirect users to untrusted sites, compromising the security of the application. By manipulating GET parameters in requests directed at error handlers, an attacker can leverage the device as a proxy, leading to potential exploitation and malicious redirection of users.
Affected Version(s)
Fortinet FortiWeb FortiWeb 6.4.1, 6.4.0, 6.3.15, 6.3.14, 6.3.13, 6.3.12, 6.3.11, 6.3.10, 6.3.9, 6.3.8, 6.3.7, 6.3.6, 6.3.5, 6.3.4, 6.3.3, 6.3.2, 6.3.1, 6.3.0, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.1.2, 6.1.1, 6.1.0, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0