{"id":"CVE-2021-3378","aliases":[],"url":"https://o3.security/vulnerability/CVE-2021-3378","summary":"FortiLogger 4.4.2.2 is affected by Arbitrary File Upload by sending a \"Content-Type: image/png\" header to Config/SaveUploadedHotspotLogoFile and then visiting Assets/temp/hotspot/img/logohotspot.asp.","details":"FortiLogger 4.4.2.2 is affected by Arbitrary File Upload by sending a \"Content-Type: image/png\" header to Config/SaveUploadedHotspotLogoFile and then visiting Assets/temp/hotspot/img/logohotspot.asp.","published":"2021-02-01T23:15:12.797","modified":"2026-06-17T04:05:00.340","cvss":{"score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"epss":{"score":0.97512,"percentile":0.99898,"asOf":"2026-09-15"},"cisaKev":null,"exploitsKnown":7,"affectedPackages":[],"fix":null,"references":[{"type":"EXPLOIT","url":"http://packetstormsecurity.com/files/161601/FortiLogger-4.4.2.2-Arbitrary-File-Upload.html"},{"type":"EXPLOIT","url":"http://packetstormsecurity.com/files/161974/FortiLogger-Arbitrary-File-Upload.html"},{"type":"EXPLOIT","url":"https://github.com/erberkan/fortilogger_arbitrary_fileupload"},{"type":"EXPLOIT","url":"http://packetstormsecurity.com/files/161601/FortiLogger-4.4.2.2-Arbitrary-File-Upload.html"},{"type":"EXPLOIT","url":"http://packetstormsecurity.com/files/161974/FortiLogger-Arbitrary-File-Upload.html"},{"type":"EXPLOIT","url":"https://github.com/erberkan/fortilogger_arbitrary_fileupload"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-06-17T04:05:00.340"}}