admin/GobyVuls
1
0
Fork 0
mirror of https://github.com/gobysec/GobyVuls.git synced 2025-05-06 10:41:40 +00:00
Code Issues Packages Projects Releases Wiki Activity
GobyVuls/FortiLogger/CVE-2021-3378
History
corp0ra1 e192bd146e
add CVE-2021-3378 
add CVE-2021-3378
2021-07-22 17:56:35 +08:00
..
CVE_2021_3378.gif
add CVE-2021-3378
2021-07-22 17:56:35 +08:00
README.md
add CVE-2021-3378
2021-07-22 17:56:35 +08:00

README.md

FortiLogger Unauth Arbitrary File Upload(CVE-2021-3378)

FortiLogger 4.4.2.2 is affected by Arbitrary File Upload by sending a "Content-Type: image/png" header to Config/SaveUploadedHotspotLogoFile and then visiting Assets/temp/hotspot/img/logohotspot.asp.

FOFA query rule: app="Fortilogger-|-Log-and-Report-System"

Demo