CVE-2017-3128

Description

A stored XSS (Cross-Site-Scripting) vulnerability in Fortinet FortiOS allows attackers to execute unauthorized code or commands via the policy global-label parameter.

Affected products

• fortinet / Fortinet FortiOS5.0.0-5.0.14, 5.2.0-5.2.10 – 5.0.0-5.0.14, 5.2.0-5.2.10

References

• VENDOR_ADVISORYhttps://fortiguard.com/psirt/FG-IR-17-057
• MISChttp://www.securitytracker.com/id/1038541
• MISChttp://www.securityfocus.com/bid/98514