CVE-2022-23439
Severity
6.1MEDIUM
EPSS
0.2%
top 56.86%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJan 22
Description
A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests, where the `Host` header points to an arbitrary webserver
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 1.6 | Impact: 2.7
Affected Packages31 packages
🔴Vulnerability Details
2GHSA▶
GHSA-xw2g-vg83-c99r: A externally controlled reference to a resource in another sphere in Fortinet FortiManager before version 7↗2025-01-22
CVEList▶
CVE-2022-23439: A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requ↗2025-01-22