diff --git a/FortiLogger/CVE-2021-3378/CVE_2021_3378.gif b/FortiLogger/CVE-2021-3378/CVE_2021_3378.gif
new file mode 100644
index 0000000..aef1391
Binary files /dev/null and b/FortiLogger/CVE-2021-3378/CVE_2021_3378.gif differ
diff --git a/FortiLogger/CVE-2021-3378/README.md b/FortiLogger/CVE-2021-3378/README.md
new file mode 100644
index 0000000..cd0215b
--- /dev/null
+++ b/FortiLogger/CVE-2021-3378/README.md
@@ -0,0 +1,9 @@
+# FortiLogger Unauth Arbitrary File Upload(CVE_2021_3378)
+
+FortiLogger 4.4.2.2 is affected by Arbitrary File Upload by sending a \"Content-Type: image/png\" header to Config/SaveUploadedHotspotLogoFile and then visiting Assets/temp/hotspot/img/logohotspot.asp.
+
+**FOFA query rule**: [app="Fortilogger-|-Log-and-Report-System"](https://fofa.so/result?qbase64=YXBwPSJGb3J0aWxvZ2dlci18LUxvZy1hbmQtUmVwb3J0LVN5c3RlbSI%3D)
+
+# Demo
+
+![](CVE_2021_3378.gif)
\ No newline at end of file