Threats tagged 'ghsa-5p6g-x54v-5xcx'

An XML injection vulnerability (blind XPath injection) exists in multiple versions of Fortinet FortiAnalyzer and FortiManager products, including their cloud variants. This flaw allows an unauthenticated remote attacker to inject arbitrary content into a signed SAML response by sending crafted SAML requests. The vulnerability affects versions 7.2.0 through 7.6.7 and 8.0.0 of these products. It has a high severity score of 8.1 CVSS 3.1, indicating significant impact on confidentiality, integrity, and availability.