We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiOS 6.4.1 and below, 6.2.9 and below may allow a remote unauthenticated attacker to either redirect users to malicious websites via a crafted "Host" header or to execute JavaScript code in the victim's browser context. This happens when the FortiGate has web filtering and category override enabled/configured.
Reserved 2019-09-09 | Published 2025-03-21 | Updated 2025-03-21 | Assigner fortinetExecute unauthorized code or commands
fortiguard.com/advisory/FG-IR-19-301
Support options
