A url redirection to untrusted site ('open redirect') in... · CVE-2021-36191 · GitHub Advisory Database · GitHub

A url redirection to untrusted site ('open redirect') in...

Moderate severity Unreviewed Published Dec 9, 2021 to the GitHub Advisory Database • Updated Feb 1, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

A url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows attacker to use the device as proxy via crafted GET parameters in requests to error handlers

References

Published by the National Vulnerability Database

Dec 8, 2021

Published to the GitHub Advisory Database Dec 9, 2021

Last updated Feb 1, 2023