diff --git a/FortiLogger/CVE-2021-3378/CVE_2021_3378.gif b/FortiLogger/CVE-2021-3378/CVE_2021_3378.gif index aef1391..8de37b3 100644 Binary files a/FortiLogger/CVE-2021-3378/CVE_2021_3378.gif and b/FortiLogger/CVE-2021-3378/CVE_2021_3378.gif differ diff --git a/FortiLogger/CVE-2021-3378/README.md b/FortiLogger/CVE-2021-3378/README.md index cd0215b..0d2147d 100644 --- a/FortiLogger/CVE-2021-3378/README.md +++ b/FortiLogger/CVE-2021-3378/README.md @@ -1,4 +1,4 @@ -# FortiLogger Unauth Arbitrary File Upload(CVE_2021_3378) +# FortiLogger Unauth Arbitrary File Upload(CVE-2021-3378) FortiLogger 4.4.2.2 is affected by Arbitrary File Upload by sending a \"Content-Type: image/png\" header to Config/SaveUploadedHotspotLogoFile and then visiting Assets/temp/hotspot/img/logohotspot.asp.