Description (CNA)
A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.2.0 through 5.2.11 and 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via the "Groups" input while creating or editing User Groups.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Fortinet, Inc. / Fortinet FortiOS | affected FortiOS versions 5.2.0 through 5.2.11, and 5.4.0 through 5.4.4 |
CWE
No CWE identifiers supplied.
References
- http://www.securitytracker.com/id/1038705
- https://fortiguard.com/advisory/FG-IR-17-127
- http://www.securityfocus.com/bid/99098
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.