← Back to CVE List

CVE-2024-54021

Published: 2025-01-14T14:15Z
Last Modified: 2025-02-03T22:04Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
An improper neutralization of crlf sequences in http headers ('http response splitting') in Fortinet FortiOS 7.2.0 through 7.6.0, FortiProxy 7.2.0 through 7.4.5 allows attacker to execute unauthorized code or commands via crafted HTTP header. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt