CVE-2017-7735

Description

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.2.0 through 5.2.11 and 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via the "Groups" input while creating or editing User Groups.

References

https://fortiguard.com/advisory/FG-IR-17-127

http://www.securitytracker.com/id/1038705

http://www.securityfocus.com/bid/99098

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3