Posted by Javier Nieto on Mar 20

Description
===================================================================
The FortiOS webui accepts a user-controlled input that specifies a link to
an external site, and uses that link in a redirect.

The redirect input parameter is also prone to a cross site scripting.

Public Fortinet Security Advisory (Mar 16 2016):
http://www.fortiguard.com/advisory/fortios-open-redirect-vulnerability

PoC…