Threats tagged 'ghsa-rm98-fc32-9ggj'

An improper encoding or escaping of output vulnerability exists in multiple versions of Fortinet FortiAnalyzer, FortiAnalyzer Cloud, FortiAnalyzer-BigData, FortiManager, and FortiManager Cloud. This flaw may allow an unauthenticated attacker to execute unauthorized code or commands via a specially crafted HTTP request. The vulnerability affects versions 7.6.0 through 7.6.7 and 8.0.0 through 8.0.2 of these products. It has a critical CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability.