| Package | Affected versions | Patched versions |
|---|---|---|
| fortiportal | ≥ 5.3.0, < 5.3.6≥ 6.0.0, < 6.0.5< 5.2.6 | 5.3.66.0.55.2.6 |
A Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Fortinet FortiPortal 6.x before 6.0.5, FortiPortal 5.3.x before 5.3.6 and any FortiPortal before 6.2.5 allows authenticated attacker to disclosure information via crafted GET request with malicious parameter values.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free