low3.5
CVE-2022-38379
Improper neutralization of input during web page generation [CWE-79] in FortiSOAR 7.0.0 through 7.0.3 and 7.2.0 may allow an authenticated attacker to inject H…
Impact
Improper neutralization of input during web page generation [CWE-79] in FortiSOAR 7.0.0 through 7.0.3 and 7.2.0 may allow an authenticated attacker to inject HTML tags via input fields of various components within FortiSOAR.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortisoar | from 7.0.0 through 7.0.3 Version 7.2.0 |