PT-2025-3014 · Fortinet · Fortiproxy+1

Published 2025-01-14 · Updated 2025-08-08 · CVE-2024-54021

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions Fortinet FortiOS versions 7.2.0 through 7.6.0 FortiProxy versions 7.2.0 through 7.4.5

Description The issue is related to an improper neutralization of crlf sequences in http headers, also known as 'http response splitting'. This allows an attacker to execute unauthorized code or commands via a crafted HTTP header. A remote unauthenticated attacker may bypass the file filter via a crafted HTTP header.

Recommendations For Fortinet FortiOS versions 7.2.0 through 7.6.0, update to a version that fixes the improper neutralization of crlf sequences in http headers. For FortiProxy versions 7.2.0 through 7.4.5, update to a version that fixes the improper neutralization of crlf sequences in http headers. As a temporary workaround, consider restricting access to crafted HTTP headers to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-436

CWE-113

Related Identifiers

BDU:2025-04289

CVE-2024-54021

Affected Products

Fortios

Fortiproxy

References · 12

• https://osv.dev/vulnerability/CVE-2024-54021 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-54021 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-54021 · Security Note
• https://fortiguard.fortinet.com/psirt/FG-IR-24-282 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-04289 · Security Note
• https://twitter.com/CVEnew/status/1879174634765173192 · Twitter Post
• https://fortiguard.com/psirt/FG-IR-24-282 · Note
• https://reddit.com/r/k12cybersecurity/comments/1i1xpbm/msisac_cybersecurity_advisory_multiple · Reddit Post
• https://t.me/cvedetector/15250 · Telegram Post
• https://t.me/cveNotify/131435 · Telegram Post
• https://t.me/cveNotify/131128 · Telegram Post
• https://t.me/cvenotify/109770 · Telegram Post