Skip to content
Sign in
4.1 Medium

CVE-2021-36191 A url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below…

Description

A url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows attacker to use the device as proxy via crafted GET parameters in requests to error handlers

Affected products and versions

Product Affected versions Fixed in
Fortinet FortiWeb Versions not published

Other CVEs of Fortinet FortiWeb

The 27 CVEs of Fortinet FortiWeb →
CVE-2021-41026 A relative path traversal in FortiWeb versions 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow an authenticated… 6.5 Medium CVE-2021-43071 A heap-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and below, version 6.2.6 and… 8.8 High CVE-2021-36194 Multiple stack-based buffer overflows in the API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may… 8.8 High CVE-2021-41017 Multiple heap-based buffer overflow vulnerabilities in some web API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0… 8.8 High
Track this CVE