Threats tagged 'ghsa-qq6m-8gxg-6mw4'

An XML injection vulnerability, also known as blind XPath injection, affects multiple versions of Fortinet FortiAnalyzer and FortiManager products including their cloud variants. This flaw allows an unauthenticated remote attacker to inject arbitrary content into a signed SAML response by sending crafted SAML requests. The vulnerability impacts versions 7.2.0 through 8.0.0 across these products. The CVSS score is 8.1, indicating a high severity issue with potential confidentiality, integrity, and availability impacts.