CVE-2021-24021

creationtimestamp| type| source ---|---|--- 2021-10-06 14:37:52+00:00| seen| https://t.me/cibsecurity/30030...

CVE-2021-24021

An improper neutralization of input vulnerability CWE-79 in FortiAnalyzer versions 6.4.3 and below, 6.2.7 and below and 6.0.10 and below may allow a remote authenticated attacker to perform a stored cross site scripting attack XSS via the column settings of Logview in FortiAnalyzer, should the...

CVE-2021-24021

Fortinet FortiAnalyzer contains an input handling flaw (CWE-79) that enables a stored XSS via the Logview column settings. A remote authenticated attacker who can obtain the relevant POST request could trigger the vulnerability. Affected versions are 6.4.3 and below, 6.2.7 and below, and 6.0.10 a...