Lucene search
FortiGuard LabsFG-IR-22-275HistoryApr 11, 2023 - 12:00 a.m.
FortiAuthenticator - Reflected XSS in the password reset page
2023-04-1100:00:00
FortiGuard Labs
www.fortiguard.com
33
fortiauthenticator
reflected xss
password reset
cwe-80
remote attacker
web page vulnerability
EPSS
0.001
Percentile
44.1%
An improper neutralization of script-related HTML tags in a web page vulnerability [CWE-80] in FortiAuthenticator may allow a remote unauthenticated attacker to trigger a reflected cross site scripting (XSS) attack via the “reset-password” page.
Related
prion
prion
Cross site scripting
2023-04-11 17:15:00
nvd
nvd
CVE-2022-35850
2023-04-11 17:15:07
cve
cve
CVE-2022-35850
2023-04-11 17:15:07
cvelist
cvelist
CVE-2022-35850
2023-04-11 16:07:22
vulnrichment
vulnrichment
CVE-2022-35850
2023-04-11 16:07:22