Volerion logoVolerion
Volerion logoVolerion

Fortinet FortiOS and FortiProxy HTTP Response Splitting Vulnerability Allowing Code Execution

Vulnerability

A vulnerability allowing HTTP response splitting has been identified in Fortinet FortiOS versions 7.2.0 to 7.6.0 and FortiProxy versions 7.2.0 to 7.4.5. This vulnerability arises from improper handling of carriage return and line feed (CRLF) sequences in HTTP headers, which can be exploited by attackers to execute unauthorized code or commands by crafting specific HTTP headers.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution or command execution on the affected system.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
6.8
impact
7.5
exploitability
6.0
remediation
0.0
relevance
0.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.