Skip to main content
Saad1
New Member
April 28, 2024
Question

HTTP header injection

  • April 28, 2024
  • 2 replies
  • 2534 views

Hello,

how we can block http header injection in fortiOS.

if the IPS what is the name of signature.

thanks

2 replies

AEK
SuperUser
SuperUser
April 28, 2024
Saad1
Saad1Author
New Member
April 28, 2024

Thanks for your answer.

no I mean http header injection attacks

not http sql injection

AEK
SuperUser
SuperUser
April 28, 2024

This one is HTTP header injection, protected by FortiGate but it concerns Oracle WebCenter Sites.

https://www.fortiguard.com/encyclopedia/ips/35215

The above is included in IPS signatures.

Unfortunately I couldn't check if "HTTP header injection" is included in FG's WAF signatures since it seems not documented by Fortinet.

AEK
amuda
Staff
Staff
April 29, 2024
Saad1
Saad1Author
New Member
April 29, 2024

Hello,

what is the f-sbid for http header injection please.