Insufficient verification of uploaded files allows attackers with webui administrators privileges to perform arbitrary code execution by uploading a new webui theme.
[
{
"product": "Fortinet Connect",
"vendor": "Fortinet",
"versions": [
{
"status": "affected",
"version": "14.2"
},
{
"status": "affected",
"version": "14.10"
},
{
"status": "affected",
"version": "15.10"
},
{
"status": "affected",
"version": "16.7"
}
]
}
]