Code injection

A permissive list of allowed inputs vulnerability CWE-183 in FortiGate version 7.2.3 and below, version 7.0.9 and below Policy-based NGFW Mode may allow an authenticated SSL-VPN user to bypass the policy via bookmarks in the web portal...

CVE-2022-42469

Fortinet CVE-2022-42469 corresp. to a permissive list of allowed inputs vulnerability in FortiGate Policy-based NGFW Mode. An authenticated SSL-VPN user could bypass policy via bookmarks in the FortiGate web portal on FortiGate versions 7.2.3 and below and 7.0.9 and below. The issue is addressed ...

CVE-2022-42469

A permissive list of allowed inputs vulnerability CWE-183 in FortiGate version 7.2.3 and below, version 7.0.9 and below Policy-based NGFW Mode may allow an authenticated SSL-VPN user to bypass the policy via bookmarks in the web portal...