CVE-2021-24007
Multiple improper neutralization of special elements of SQL commands vulnerabilities in FortiMail before 6.4.4 may allow a non-authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.
- Score
- CVSS 3.1 9.8 Critical
- Status
- Modified - psirt@fortinet.com
- Published
- 2021-07-09
- Last modified
- 2024-10-25
- Weaknesses
- CWE-89
Affected products
References
- https://fortiguard.com/advisory/FG-IR-21-012
