CVE-2017-3129: XSS
Published May 26, 2017
·Updated
A Cross-Site Scripting vulnerability in Fortinet FortiWeb versions 5.7.1 and below allows attacker to execute unauthorized code or commands via an improperly sanitized POST parameter in the FortiWeb Site Publisher feature.
Affected Software
1 affected component
Fortinet FortiWeb<=5.7.1
Event History
May 26, 2017
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-3129?
CVE-2017-3129 is considered a high-severity vulnerability due to the potential for unauthorized code execution.
2
How do I fix CVE-2017-3129?
To fix CVE-2017-3129, upgrade to Fortinet FortiWeb version 5.7.2 or later.
3
What versions of Fortinet FortiWeb are affected by CVE-2017-3129?
Fortinet FortiWeb versions 5.7.1 and below are affected by CVE-2017-3129.
4
What type of vulnerability is CVE-2017-3129?
CVE-2017-3129 is a Cross-Site Scripting (XSS) vulnerability.
5
What potential impact does CVE-2017-3129 have on a system?
CVE-2017-3129 allows attackers to execute unauthorized code or commands, potentially compromising the affected system.