Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiDeceptor management interface 4.2.0, 4.1.0 through 4.1.1, 4.0.2 may allow an authenticated user to perform a cross site scripting (XSS) attack via sending requests with specially crafted lure resource ID.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Vulnerability Type
N/A
Vulnerability Title
Fortinet FortiDeceptor 跨站脚本漏洞
Vulnerability Description
Fortinet FortiDeceptor是美国飞塔（Fortinet）公司的一款网络威胁检测平台。该平台主要通过欺骗技术暴露网络威胁等。 Fortinet FortiDeceptor 4.2.0版本、4.1.0版本至4.1.1版本、4.0.2版本存在安全漏洞，该漏洞源于在网页生成过程中对输入进行不正确的中和。攻击者利用该漏洞执行跨站脚本漏洞。
CVSS Information
N/A
Vulnerability Type
N/A