CVE-2017-7732

A reflected Cross-Site Scripting XSS vulnerability in Fortinet FortiMail 5.1 and earlier, 5.2.0 through 5.2.9, and 5.3.0 through 5.3.9 customized pre-authentication webmail login page allows attacker to inject arbitrary web script or HTML via crafted HTTP requests...

CVE-2017-7732

CVE-2017-7732 is a reflected XSS vulnerability in Fortinet FortiMail (versions up to 5.1, 5.2.0–5.2.9, 5.3.0–5.3.9) on the pre-authentication webmail login page. The issue allows an attacker to inject arbitrary web script/HTML via crafted HTTP requests, with exploitation described as pre-auth, po...