CVE-2022-38379

CVSS V2 None CVSS V3 None
Description
Improper neutralization of input during web page generation [CWE-79] in FortiSOAR 7.0.0 through 7.0.3 and 7.2.0 may allow an authenticated attacker to inject HTML tags via input fields of various components within FortiSOAR.
Overview
  • CVE ID
  • CVE-2022-38379
  • Assigner
  • psirt@fortinet.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2022-12-06T17:15:10
  • Last Modified Date
  • 2022-12-07T21:36:12
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:* 1 OR 7.0.0 7.0.3
cpe:2.3:a:fortinet:fortisoar:7.2.0:*:*:*:*:*:*:* 1 OR
References
Reference URL Reference Tags
https://fortiguard.com/psirt/FG-IR-22-220
History
Created Old Value New Value Data Type Notes
2022-12-07 18:06:50 Added to TrackCVE
2022-12-07 21:15:55 2022-12-06T17:15:10.933 2022-12-06T17:15:10 CVE Published Date updated
2022-12-07 21:15:55 2022-12-06T19:23:25 CVE Modified Date updated
2022-12-07 21:15:55 Awaiting Analysis Undergoing Analysis Vulnerability Status updated
2022-12-07 22:14:59 2022-12-07T21:36:12 CVE Modified Date updated
2022-12-07 22:14:59 Undergoing Analysis Analyzed Vulnerability Status updated
2022-12-07 22:14:59 CWE-79 Weakness Enumeration new
2022-12-07 22:15:00 CPE Information updated