VULNERABILITY INTELLIGENCE

CVE-2021-41026

CVSS score6.5 MEDIUM
EPSS probability0.93%
CISA KEVNot currently listed
Published2022-04-06
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

A relative path traversal in FortiWeb versions 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow an authenticated attacker to retrieve arbitrary files from the underlying filesystem via specially crafted web requests.

Weakness classification

  • nvd@nist.gov: CWE-22

Primary references