CVE-2021-43063

A improper neutralization of input during web page generation 'cross-site scripting' in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and below, version 6.2.6 and below allows attacker to execute unauthorized code or commands via crafted HTTP GET requests to the login webpage...

CVE-2021-43063

creationtimestamp| type| source ---|---|--- 2021-12-08 16:22:39+00:00| seen| https://t.me/cibsecurity/33577...

CVE-2021-43063

Fortinet FortiWeb is affected by CVE-2021-43063 due to an improper input neutralization during login page generation, enabling a remote attacker to run unauthorized code or commands via crafted HTTP GET requests to the login webpage. Affected FortiWeb versions: 6.4.1, 6.4.0, 6.3.15 and below, and...