> CRLF Header Injection in webmail user GUI

[SOURCE] Fortinet FortiGuard [DATE: 18/11/2025 08:00] [LANGUAGE: EN]

 
  CVSSv3 Score:
 
 3.9

 A CRLF Header Injection vulnerability [CWE-93] in FortiMail user GUI may allow an attacker to inject headers in the response via convincing a user to click on a specifically crafted link

  Revised on 2025-11-18 00:00:00

[messages.read_original_source] →