medium5.4
CVE-2021-32594
An unrestricted file upload vulnerability in the web interface of FortiPortal 6.0.0 through 6.0.4, 5.3.0 through 5.3.5, 5.2.0 through 5.2.5, and 4.2.2 and earl…
Impact
An unrestricted file upload vulnerability in the web interface of FortiPortal 6.0.0 through 6.0.4, 5.3.0 through 5.3.5, 5.2.0 through 5.2.5, and 4.2.2 and earlier may allow a low-privileged user to potentially tamper with the underlying system's files via the upload of specifically crafted files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortiportal | from 4.0.0 through 4.0.4 from 4.1.0 through 4.1.2 from 4.2.0 through 4.2.4 from 5.0.0 through 5.0.3 from 5.1.0 through 5.1.2 from 5.2.0 before 5.2.6 |