CVE-2021-32594

Published: Aug 4, 2021Modified: Nov 21, 2024

8.1

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Exploitability: 2.8 / Impact: 5.2

Source: NVD

Description

An unrestricted file upload vulnerability in the web interface of FortiPortal 6.0.0 through 6.0.4, 5.3.0 through 5.3.5, 5.2.0 through 5.2.5, and 4.2.2 and earlier may allow a low-privileged user to potentially tamper with the underlying system's files via the upload of specifically crafted files.

Affected (8)

Products: Fortinet: Fortiportal

Fortinet

1 product

Fortiportal

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Fortinet Fortiportal	From 4.0.0 to 4.0.4
Fortinet Fortiportal	From 4.1.0 to 4.1.2
Fortinet Fortiportal	From 4.2.0 to 4.2.4
Fortinet Fortiportal	From 5.0.0 to 5.0.3
Fortinet Fortiportal	From 5.1.0 to 5.1.2
Fortinet Fortiportal	From 5.2.0 to 5.2.6
Fortinet Fortiportal	From 5.3.0 to 5.3.6
Fortinet Fortiportal	From 6.0.0 to 6.0.5

Related CWEs

CWE-434

Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

References (2)

https://fortiguard.com/advisory/FG-IR-21-092

Source: psirt@fortinet.com

Vendor Advisory

https://fortiguard.com/advisory/FG-IR-21-092

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.