CVE-2022-38374

A improper neutralization of input during web page generation 'cross-site scripting' in Fortinet FortiADC 7.0.0 - 7.0.2 and 6.2.0 - 6.2.4 allows an attacker to execute unauthorized code or commands via the URL and User fields observed in the traffic and event logviews...

Exploit for Cross-site Scripting in Fortinet Fortiadc

CVE-2022-38374 !imagehttps://us...

CVE-2022-38374

Fortinet FortiADC is affected by CVE-2022-38374 due to improper neutralization of input during web page generation (XSS). Affects FortiADC versions 6.2.0–6.2.4 and 7.0.0–7.0.2. An attacker can exploit via the URL and User fields observed in traffic and event log views to run client-side code. The...