An improper neutralization vulnerability leading to SQL injection has been identified in FortiMail webmail. Tracked as CWE-89 with a CVSS score of 7.7, the flaw allows an authenticated attacker to execute unauthorized commands or code through carefully crafted HTTP requests. Administrators should review vendor advisories and apply the appropriate patches to secure their email infrastructure.
READ THE ORIGINAL ARTICLE AT FORTIGUARD.FORTINET.COM →