| IR Number | FG-IR-22-220 |
| Date | Dec 6, 2022 |
| Severity |
Low |
| CVSSv3 Score | 3.4 |
| Impact | Execute unauthorized code or commands |
| CVE ID | CVE-2022-38379 |
| Affected Products |
FortiSOAR
:
7.2.0, 7.0.3, 7.0.2, 7.0.1, 7.0.0
|
| CVRF | Download |
Refine Search
PSIRT Advisories
FortiSOAR - HTML Injection Vulnerabilities
Summary
Improper neutralization of input during web page generation [CWE-79] in FortiSOAR may allow an authenticated attacker to inject HTML tags via input fields of various components within FortiSOAR.
Affected Products
FortiSOAR version 7.2.0FortiSOAR version 7.0.0 through 7.0.3