We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
A blind SQL injection in the user interface of FortiWeb 6.3.0 through 6.3.7 and version before 6.2.4 may allow an unauthenticated, remote attacker to execute arbitrary SQL queries or commands by sending a request with a crafted Authorization header containing a malicious SQL statement.
Reserved 2020-11-24 | Published 2021-01-14 | Updated 2024-10-25 | Assigner fortinetExecute unauthorized code or commands
www.fortiguard.com/psirt/FG-IR-20-124
Support options
