FortiWeb Unauthenticated XSSFortiWeb Unauthenticated XSS

Description

FortiWeb is a web application firewall (WAF) that protects web applications and APIs from known and unknown exploits.

FortiWeb v6.3.x-6.2.x are vulnerable to reflected cross site scripting(XSS) attacks. A remote attacker can perform this attack by injecting malicious payload in different vulnerable API end-points in FortiWeb GUI interface 6.3.0, 6.3.7 and version before 6.2.4 due to improper neutralization of input during web page generation.

Recommendation

• Update FortiWeb to the latest version

Written by

Anandhu K A

Lead Engineer

With a profound understanding of product development, Anandhu plays a pivotal role in crafting cutting-edge solutions that cater to the evolving security needs of digital applications. His expertise, deeply rooted in both engineering and security, makes him an essential component of Beagle Security's mission