CVE-2018-9186 | BDVDB-2026-101370 Detail

FortinetFortiAuthenticator

Description#

A cross-site scripting (XSS) vulnerability in Fortinet FortiAuthenticator in versions 4.0.0 to before 5.3.0 "CSRF validation failure" page allows attacker to execute unauthorized script code via inject malicious scripts in HTTP referer header.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://fortiguard.com/advisory/FG-IR-18-059
http://www.securityfocus.com/bid/104371

Exploit#

No public exploit known

History#

Version 12018-05-31Record published in the CVE List.
Version 22024-10-25Most recent update recorded in the CVE List.