CVE-2021-32594medium

CVE-2021-32594

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.4epss 0.7%

probabilidade de exploração

0.7%top 47% das CVEs

exploração observada

nãonenhuma fonte reporta

An unrestricted file upload vulnerability in the web interface of FortiPortal 6.0.0 through 6.0.4, 5.3.0 through 5.3.5, 5.2.0 through 5.2.5, and 4.2.2 and earlier may allow a low-privileged user to potentially tamper with the underlying system's files via the upload of specifically crafted files.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:U/RC:C

Produtos afetados

Fortinet · Fortinet FortiPortal

Referências

https://fortiguard.com/advisory/FG-IR-21-092