CVE-2019-5586

CVE-2019-5586 is a reflected XSS in Fortinet FortiOS via the SSL VPN web portal. Affects FortiOS versions 5.2.0–5.6.10 and 6.0.0–6.0.4; the issue can be triggered by unsafely handling the param on error-page HTTP requests. The impact is described as the attacker being able to execute malicious sc...