← Database

CVE-2021-41026

MEDIUM CVSS: 6.5 Published: 2022-04-06 Modified: 2026-06-17

Description

A relative path traversal in FortiWeb versions 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow an authenticated attacker to retrieve arbitrary files from the underlying filesystem via specially crafted web requests.

Affected Platforms

Fortinet Fortiweb

Weakness Type

CWE-22

References