5 matches found
CVE-2021-3378
FortiLogger 4.4.2.2 is affected by Arbitrary File Upload by sending a "Content-Type: image/png" header to Config/SaveUploadedHotspotLogoFile and then visiting Assets/temp/hotspot/img/logohotspot.asp...
Design/Logic Flaw
FortiLogger 4.4.2.2 is affected by Arbitrary File Upload by sending a "Content-Type: image/png" header to Config/SaveUploadedHotspotLogoFile and then visiting Assets/temp/hotspot/img/logohotspot.asp...
CVE-2021-3378
FortiLogger 4.4.2.2 is affected by Arbitrary File Upload by sending a "Content-Type: image/png" header to Config/SaveUploadedHotspotLogoFile and then visiting Assets/temp/hotspot/img/logohotspot.asp...
CVE-2021-3378: Unrestricted Upload of File with Dangerous Type
FortiLogger 4.4.2.2 is affected by Arbitrary File Upload by sending a "Content-Type: image/png" header to Config/SaveUploadedHotspotLogoFile and then visiting Assets/temp/hotspot/img/logohotspot.asp...
PT-2021-20318
Name of the Vulnerable Software and Affected Versions: FortiLogger version 4.4.2.2 Description: The issue allows for Arbitrary File Upload by sending a "Content-Type: image/png" header to "Config/SaveUploadedHotspotLogoFile" and then visiting "Assets/temp/hotspot/img/logohotspot.asp". This can be...