CyberRota Analysis
AI-GeneratedFortinet FortiOS and FortiProxy versions 7.2 to 7.6.4 are vulnerable to HTTP Response Splitting due to improper handling of CRLF sequences in HTTP headers. This flaw allows an attacker with a valid web filter override token to inject arbitrary headers by tricking users into clicking on a malicious link, potentially leading to session hijacking or other attacks. Organizations using the affected versions should prioritize patching to mitigate the risk of exploitation.
Original NVD Description
An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.4, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions may allow an attacker in possession of a valid web filter override token to inject arbitrary headers via tricking a user into clicking on a crafted link.
Related CVEs
Other vulnerabilities affecting the same vendor(s)