Security Advisory

CVE-2022-38379

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-12-06 16:00:58
Last updated 2024-10-22 20:51:29
Assigner fortinet
CVSS score 3.4
State PUBLISHED

Description

Improper neutralization of input during web page generation [CWE-79] in FortiSOAR 7.0.0 through 7.0.3 and 7.2.0 may allow an authenticated attacker to inject HTML tags via input fields of various components within FortiSOAR.