Fortinet FortiGate Stored Cross-Site Scripting Vulnerability via Crafted DHCP Packets

A stored cross-site scripting vulnerability has been identified in Fortinet FortiGate versions 6.2.0 through 6.2.1 and 6.0.0 through 6.0.6. The issue arises in the hostname parameter of DHCP packets on the DHCP monitor page. An unauthenticated attacker on the same network as the FortiGate device can exploit this vulnerability by sending a specially crafted DHCP packet.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user.

Remediation

Users are advised to upgrade to FortiOS version 6.2.2 or above, or FortiOS version 6.0.7 or above.