exploitDog

CVE-2017-3129

Опубликовано: 27 мая 2017

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

A Cross-Site Scripting vulnerability in Fortinet FortiWeb versions 5.7.1 and below allows attacker to execute unauthorized code or commands via an improperly sanitized POST parameter in the FortiWeb Site Publisher feature.

Ссылки

http://www.securityfocus.com/bid/98382
Third Party Advisory
VDB Entry
https://fortiguard.com/psirt/FG-IR-17-076
Vendor Advisory
http://www.securityfocus.com/bid/98382
Third Party Advisory
VDB Entry
https://fortiguard.com/psirt/FG-IR-17-076
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*

Версия до 5.7.1 (включая)

EPSS

Процентиль: 50%

0.00265

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-hmx8-w4r7-p975

CVSS3: 6.1

github

больше 3 лет назад

A Cross-Site Scripting vulnerability in Fortinet FortiWeb versions 5.7.1 and below allows attacker to execute unauthorized code or commands via an improperly sanitized POST parameter in the FortiWeb Site Publisher feature.

EPSS

Процентиль: 50%

0.00265

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79