imPC@ndo IT

Tracker / CVE-2021-24013

CVE-2021-24013

High 8.8

Multiple Path traversal vulnerabilities in the Webmail of FortiMail before 6.4.4 may allow a regular user to obtain unauthorized access to files and data via specifically crafted web requests.

Affected products and versions

fortinet fortimail · 5.4.0 → 5.4.12
fortinet fortimail · 6.0.0 → 6.0.11
fortinet fortimail · 6.2.0 → 6.2.7
fortinet fortimail · 6.4.0 → 6.4.4

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References