Detections
Analytics
CVE-2024-23111
medium
Description
An improper neutralization of input during web page Generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiOS version 7.4.3 and below, 7.2 all versions, 7.0 all versions and FortiProxy version 7.4.2 and below, 7.2 all versions, 7.0 all versions reboot page may allow a remote privileged attacker with super-admin access to execute JavaScript code via crafted HTTP GET requests.
References
https://www.cisa.gov/news-events/ics-advisories/icsa-24-193-02
https://securityaffairs.com/164494/security/fortios-high-severity-code-execution-flaws.html