CVE-2021-41026
A relative path traversal in FortiWeb versions 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow an authenticated attacker to retrieve arbitrary files from the underlying filesystem via specially crafted web requests.
- Score
- CVSS 3.1 6.5 Medium
- Status
- Modified - psirt@fortinet.com
- Published
- 2022-04-06
- Last modified
- 2024-10-22
- Weaknesses
- CWE-22, CWE-284
Affected products
References
- https://fortiguard.com/advisory/FG-IR-21-156
