Aller au contenu
Se connecter
8.0 Élevée

CVE-2022-38373 An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiDeceptor management…

Description

An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiDeceptor management interface 4.2.0, 4.1.0 through 4.1.1, 4.0.2 may allow an authenticated user to perform a cross site scripting (XSS) attack via sending requests with specially crafted lure resource ID.

Produits et versions touchés

Produit Versions touchées Corrigé en
Fortinet FortiDeceptor Versions non publiées

Autres CVE de Fortinet FortiDeceptor

Les 3 CVE de Fortinet FortiDeceptor →
CVE-2022-30302 Multiple relative path traversal vulnerabilities [CWE-23] in FortiDeceptor management interface 1.0.0 through 3.2.x,… 6.5 Moyenne CVE-2020-6644 An insufficient session expiration vulnerability in FortiDeceptor 3.0.0 and below allows an attacker to reuse the… Non notée
Suivre cette CVE