CVE-2017-7735

N/A

Descricao

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.2.0 through 5.2.11 and 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via the "Groups" input while creating or editing User Groups.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado9/12/2017

Ultima modificacao4/20/2025

Fontenvd

Avistamentos honeypot0

Produtos afetados

fortinet:fortios

Fraquezas (CWE)

CWE-79

Referencias

http://www.securityfocus.com/bid/99098(psirt@fortinet.com)

http://www.securitytracker.com/id/1038705(psirt@fortinet.com)

https://fortiguard.com/advisory/FG-IR-17-127(psirt@fortinet.com)

http://www.securityfocus.com/bid/99098(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id/1038705(af854a3a-2127-422b-91ae-364da2661108)

https://fortiguard.com/advisory/FG-IR-17-127(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.