Fortinet FortiPortal File Upload Vulnerability

Fortinet FortiPortal is a hosted security analysis and management support tool for Fortinet’s FortiGate, FortiWiFi and FortiAP product lines, available as a virtual machine for MSPs.Fortinet FortiPortal is vulnerable in versions 6.0.0 to 6.0.4, 5.3 .0 through 5.3.5, 5.2.0 through 5.2.5, and 4.2.2 and earlier versions contain a file upload vulnerability that is caused by insufficient validation of files when uploading them. An attacker could exploit the vulnerability to upload malicious files to the system and tamper with the underlying system’s files.