CVE-2017-7733

Fortinet FortiOS 5.4.x before 5.4.6 and 5.6.x before 5.6.1 contain a cross-site scripting (XSS) vulnerability in the web GUI Login Disclaimer redir parameter. The issue allows a remote unauthenticated attacker to execute arbitrary JavaScript in the victim’s browser. Root cause is input handling i...