What’s Vulnerable › Vulnerabilities
CVE-2021-41024
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.6% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2021-12-08 · updated 2026-06-17
- Weakness: CWE-22
Description
A relative path traversal [CWE-23] vulnerabiltiy in FortiOS versions 7.0.0 and 7.0.1 and FortiProxy verison 7.0.0 may allow an unauthenticated, unauthorized attacker to inject path traversal character sequences to disclose sensitive information of the server via the GET request of the login page.
Affected products
- Fortinet FortiOS (FortiGate): 7.0.0, 7.0.1
- Fortinet FortiProxy: 7.0.0
References
Get alerted when CVE-2021-41024 or the next vulnerability affects your stack