Cross-Site Scripting Vulnerability in FortiWLM by Fortinet
CVE-2021-42752

5.4MEDIUM

Key Information:

Vendor
Fortinet
Status
Fortinet Fortiwlm
Vendor
CVE Published:
8 December 2021

Summary

An improper handling of user input during web page generation in Fortinet's FortiWLM versions 8.6.1 and earlier allows attackers to exploit this vulnerability. By crafting specially designed HTTP requests, an attacker can inject and execute malicious JavaScript code on the victim's host, leading to potential unauthorized actions and data exposure.

Affected Version(s)

Fortinet FortiWLM FortiWLM 8.6.1, 8.6.0, 8.5.2, 8.5.1, 8.5.0, 8.4.2, 8.4.1, 8.4.0, 8.3.2, 8.3.1, 8.3.0, 8.2.2

References

https://fortiguard.com/advisory/FG-IR-21-111
x_refsource_CONFIRM

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.