CVE-2024-35280

A improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Fortinet FortiDeceptor 5.3.0, FortiDeceptor 5.2.0, FortiDeceptor 5.1 all versions, FortiDeceptor 5.0 all versions, FortiDeceptor 4.3 all versions, FortiDeceptor 4.2 all versions, FortiDeceptor 4....

CVE-2024-35280

creationtimestamp| type| source ---|---|--- 2025-01-15 10:17:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113831854411716828 2025-01-15 11:14:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1733 2025-01-15 11:15:30+00:00| seen|...

CVE-2024-35280

CVE-2024-35280 describes a cross-site scripting vulnerability in Fortinet FortiDeceptor, affecting versions 3.x through 5.3.0. The issue stems from improper neutralization of input during web page generation, allowing a reflected XSS in recovery endpoints. Public details are corroborated across m...

CVE-2024-35280

A improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Fortinet FortiDeceptor 5.3.0, FortiDeceptor 5.2.0, FortiDeceptor 5.1 all versions, FortiDeceptor 5.0 all versions, FortiDeceptor 4.3 all versions, FortiDeceptor 4.2 all versions, FortiDeceptor 4....