← Database

CVE-2021-36191

MEDIUM CVSS: 4.1 Published: 2021-12-08 Modified: 2026-06-17

Description

A url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows attacker to use the device as proxy via crafted GET parameters in requests to error handlers

Affected Platforms

Fortinet Fortiweb

Weakness Type

CWE-601

References