Skip to content
Sign in
8.0 High

CVE-2022-38373 An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiDeceptor management…

Description

An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiDeceptor management interface 4.2.0, 4.1.0 through 4.1.1, 4.0.2 may allow an authenticated user to perform a cross site scripting (XSS) attack via sending requests with specially crafted lure resource ID.

Affected products and versions

Product Affected versions Fixed in
Fortinet FortiDeceptor Versions not published

Other CVEs of Fortinet FortiDeceptor

The 3 CVEs of Fortinet FortiDeceptor →
CVE-2022-30302 Multiple relative path traversal vulnerabilities [CWE-23] in FortiDeceptor management interface 1.0.0 through 3.2.x,… 6.5 Medium CVE-2020-6644 An insufficient session expiration vulnerability in FortiDeceptor 3.0.0 and below allows an attacker to reuse the… Not rated
Track this CVE