SSLVPN WEB UI Text injection Fortinet PSIRT Advisories Fortinet PSIRT Contact: Website: https://fortiguard.fortinet.com/faq/psirt-contact FG-IR-24-033 Final 1 1 2024-11-12T00:00:00 Current version 2024-11-12T00:00:00 2024-11-12T00:00:00 An improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability [CWE-74] in FortiOS and FortiProxy SSL-VPN web user interface may allow a remote unauthenticated attacker to perform phishing attempts via crafted requests. None Improper access control None Fortinet is pleased to thank Livio Victoriano, Michal Majchrowicz and Marcin Wyczechowski from AFINE Team for reporting this vulnerability under responsible disclosure. FortiOS 7.4.3 FortiOS 7.4.2 FortiOS 7.4.1 FortiOS 7.4.0 FortiOS 7.2.8 FortiOS 7.2.7 FortiOS 7.2.6 FortiOS 7.2.5 FortiOS 7.2.4 FortiOS 7.2.3 FortiOS 7.2.2 FortiOS 7.2.1 FortiOS 7.2.0 FortiOS 7.0.19 FortiOS 7.0.18 FortiOS 7.0.17 FortiOS 7.0.16 FortiOS 7.0.15 FortiOS 7.0.14 FortiOS 7.0.13 FortiOS 7.0.12 FortiOS 7.0.11 FortiOS 7.0.10 FortiOS 7.0.9 FortiOS 7.0.8 FortiOS 7.0.7 FortiOS 7.0.6 FortiOS 7.0.5 FortiOS 7.0.4 FortiOS 7.0.3 FortiOS 7.0.2 FortiOS 7.0.1 FortiOS 7.0.0 FortiProxy 7.4.3 FortiProxy 7.4.2 FortiProxy 7.4.1 FortiProxy 7.4.0 FortiProxy 7.2.9 FortiProxy 7.2.8 FortiProxy 7.2.7 FortiProxy 7.2.6 FortiProxy 7.2.5 FortiProxy 7.2.4 FortiProxy 7.2.3 FortiProxy 7.2.2 FortiProxy 7.2.1 FortiProxy 7.2.0 FortiProxy 7.0.16 FortiProxy 7.0.15 FortiProxy 7.0.14 FortiProxy 7.0.13 FortiProxy 7.0.12 FortiProxy 7.0.11 FortiProxy 7.0.10 FortiProxy 7.0.9 FortiProxy 7.0.8 FortiProxy 7.0.7 FortiProxy 7.0.6 FortiProxy 7.0.5 FortiProxy 7.0.4 FortiProxy 7.0.3 FortiProxy 7.0.2 FortiProxy 7.0.1 FortiProxy 7.0.0 CVE-2024-33510 FortiOS-7.4.3 FortiOS-7.4.2 FortiOS-7.4.1 FortiOS-7.4.0 FortiOS-7.2.8 FortiOS-7.2.7 FortiOS-7.2.6 FortiOS-7.2.5 FortiOS-7.2.4 FortiOS-7.2.3 FortiOS-7.2.2 FortiOS-7.2.1 FortiOS-7.2.0 FortiOS-7.0.19 FortiOS-7.0.18 FortiOS-7.0.17 FortiOS-7.0.16 FortiOS-7.0.15 FortiOS-7.0.14 FortiOS-7.0.13 FortiOS-7.0.12 FortiOS-7.0.11 FortiOS-7.0.10 FortiOS-7.0.9 FortiOS-7.0.8 FortiOS-7.0.7 FortiOS-7.0.6 FortiOS-7.0.5 FortiOS-7.0.4 FortiOS-7.0.3 FortiOS-7.0.2 FortiOS-7.0.1 FortiOS-7.0.0 FortiProxy-7.4.3 FortiProxy-7.4.2 FortiProxy-7.4.1 FortiProxy-7.4.0 FortiProxy-7.2.9 FortiProxy-7.2.8 FortiProxy-7.2.7 FortiProxy-7.2.6 FortiProxy-7.2.5 FortiProxy-7.2.4 FortiProxy-7.2.3 FortiProxy-7.2.2 FortiProxy-7.2.1 FortiProxy-7.2.0 FortiProxy-7.0.16 FortiProxy-7.0.15 FortiProxy-7.0.14 FortiProxy-7.0.13 FortiProxy-7.0.12 FortiProxy-7.0.11 FortiProxy-7.0.10 FortiProxy-7.0.9 FortiProxy-7.0.8 FortiProxy-7.0.7 FortiProxy-7.0.6 FortiProxy-7.0.5 FortiProxy-7.0.4 FortiProxy-7.0.3 FortiProxy-7.0.2 FortiProxy-7.0.1 FortiProxy-7.0.0 3.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:U/RL:O/RC:R https://fortiguard.fortinet.com/psirt/FG-IR-24-033 SSLVPN WEB UI Text injection Reference>