Lucene search

K
cvelistMitreCVELIST:CVE-2021-3378
HistoryFeb 01, 2021 - 10:08 p.m.

CVE-2021-3378

2021-02-0122:08:33
mitre
www.cve.org
5
fortilogger
arbitrary file upload
vulnerability
cve-2021-3378
content-type
image/png
config/saveuploadedhotspotlogofile
assets/temp/hotspot/img/logohotspot.asp

AI Score

9.7

Confidence

High

EPSS

0.745

Percentile

98.2%

FortiLogger 4.4.2.2 is affected by Arbitrary File Upload by sending a “Content-Type: image/png” header to Config/SaveUploadedHotspotLogoFile and then visiting Assets/temp/hotspot/img/logohotspot.asp.

AI Score

9.7

Confidence

High

EPSS

0.745

Percentile

98.2%