| Package | Affected versions | Patched versions |
|---|---|---|
| fortiproxy | ≥ 7.0.0, < 7.6.4 | 7.6.4 |
| fortisase | = 25.3.40 |
An URL Redirection to Untrusted Site vulnerabilities [CWE-601] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions, FortiSASE 25.2.a may allow an unauthenticated attacker to perform an open redirect attack via crafted HTTP requests.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free