Description (CNA)
Improper neutralization of input during web page generation [CWE-79] in FortiSOAR 7.0.0 through 7.0.3 and 7.2.0 may allow an authenticated attacker to inject HTML tags via input fields of various components within FortiSOAR.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Fortinet / FortiSOAR | affected 7.2.0; affected 7.0.0 through 7.0.3 |
CWE
CWE-79
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.