CVE-2022-38379

Improper neutralization of input during web page generation [CWE-79] in FortiSOAR 7.0.0 through 7.0.3 and 7.2.0 may allow an authenticated attacker to inject HTML tags via input fields of various components within FortiSOAR.

Score

CVSS 3.1 5.4 Medium

Status

Modified - psirt@fortinet.com

Published

2022-12-06

Last modified

2024-10-22

Weaknesses

CWE-79

Affected products

• Fortisoar (Fortinet)

References

• https://fortiguard.com/psirt/FG-IR-22-220