Lucene search

K
fortinetFortiGuard LabsFG-IR-22-224
HistoryFeb 16, 2023 - 12:00 a.m.

Protect

2023-02-1600:00:00
FortiGuard Labs
www.fortiguard.com
44
fortios
input neutralization
remote attack
xss
forticloud

EPSS

0.001

Percentile

49.8%

An improper neutralization of input during web page generation [CWE-79] vulnerability in FortiOS may allow a remote, unauthenticated attacker to launch a cross site scripting (XSS) attack via the “redir” parameter of the URL seen when the “Sign in with FortiCloud” button is clicked.
Â

EPSS

0.001

Percentile

49.8%

Related for FG-IR-22-224