CVE-2018-13380

MEDIUMNuclei

Fortinet FortiOS - Cross-Site Scripting

Title source: github.com
STIX 2.1 vulnerability

Record summary

CVE-2018-13380 has a selected CVSS score of 4.7 (medium); EIP currently links 1 Nuclei template.

Description

A Cross-site Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4.0 to 5.4.12, 5.2 and below and Fortinet FortiProxy 2.0.0, 1.2.8 and below under SSL VPN web portal allows attacker to execute unauthorized malicious script code via the error or message handling parameters.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Oct 23, 2024 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Fortinet FortiOS and FortiProxy

Browse Fortinet / Fortinet FortiOS and FortiProxy
CVE ListFortiGate 6.0.0 through 6.0.4, 5.6.0 through 5.6.7, 5.4.0 through 5.4.12, 5.2 and earlier and FortiProxy versions 2.0.0, 1.2.8 and earlieraffected

Nuclei templates

1
ProjectDiscoveryMEDIUMFortinet FortiOS - Cross-Site ScriptingCVSS 6.1

Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4.0 to 5.4.12, 5.2 and below versions under SSL VPN web portal are vulnerable to cross-site scripting and allows attacker to execute unauthorized malicious script code via the error or message handling parameters.

Impact

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary script code in the context of the targeted user's browser, potentially leading to session hijacking, defacement, or theft of sensitive information.

Remediation

Apply the latest security patches or updates provided by Fortinet to fix this vulnerability.

WeaknessesCWE-79
Authorsshelld3v, AaronChen0
Template tagscvecve2018fortiosxssfortinetvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
Shodan: http.html:"/remote/login" "xxxxxxxx"
Shodan: http.favicon.hash:945408572
Shodan: cpe:"cpe:2.3:o:fortinet:fortios"
Shodan: port:10443 http.favicon.hash:945408572
FOFA: body="/remote/login" "xxxxxxxx"
FOFA: icon_hash=945408572
https://blog.orange.tw/2019/08/attacking-ssl-vpn-part-2-breaking-the-fortigate-ssl-vpn.html https://fortiguard.com/advisory/FG-IR-18-383 https://fortiguard.com/advisory/FG-IR-20-230 https://nvd.nist.gov/vuln/detail/CVE-2018-13380 https://github.com/merlinepedra25/nuclei-templates

Source: ProjectDiscovery

References

5