CVE-2022-43950

Description

A URL redirection to untrusted site ('Open Redirect') vulnerability [CWE-601] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.1 and below, 9.2 all versions, 9.1 all versions, 8.8 all versions, 8.7 all versions may allow an unauthenticated attacker to redirect users to any arbitrary website via a crafted URL.

Reserved 2022-10-27 | Published 2023-05-03 | Updated 2024-10-22 | Assigner fortinet

Problem types

Execute unauthorized code or commands

Product status

Default status
unaffected

9.4.0
affected

9.2.0
affected

9.1.0
affected

8.8.0
affected

8.7.0
affected

References

fortiguard.com/psirt/FG-IR-22-407

cve.org (CVE-2022-43950)

nvd.nist.gov (CVE-2022-43950)

Download JSON