CVE-2022-38373

An improper neutralization of input during web page generation vulnerability CWE-79 in FortiDeceptor management interface 4.2.0, 4.1.0 through 4.1.1, 4.0.2 may allow an authenticated user to perform a cross site scripting XSS attack via sending requests with specially crafted lure resource ID...

CVE-2022-38373

CVE-2022-38373 affects Fortinet FortiDeceptor management interface versions 4.0.2, 4.1.0–4.1.1, and 4.2.0. The issue is an improper neutralization of input during web page generation, enabling a cross-site scripting (XSS) attack by an authenticated user sending requests with a specially crafted l...