CVE-2022-23438

medium

Description

An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in FortiOS version 7.0.5 and prior and 6.4.9 and prior may allow an unauthenticated remote attacker to perform a reflected cross site scripting (XSS) attack in the captive portal authentication replacement page.

References

https://fortiguard.com/psirt/FG-IR-21-057

Details

Source: MITRE

Published: 2022-07-18

Updated: 2022-07-25

Type: CWE-79