CVE-2022-23439

No fix known EPSS <1%CVSS 4.1

A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests, where the `Host` header points to an arbitrary webserver

Published 2025-01-22 · CVE record · OSV

Products: Fortinet FortiTester, Fortinet FortiOS, Fortinet FortiRecorder, Fortinet FortiNDR, Fortinet FortiADC, Fortinet FortiManager, Fortinet FortiVoice, Fortinet FortiSOAR on-premise, Fortinet FortiDDoS, Fortinet FortiWLC, Fortinet FortiAnalyzer, Fortinet FortiPortal, Fortinet FortiAuthenticator, Fortinet FortiMail, Fortinet FortiDDoS-F, Fortinet FortiSwitch, Fortinet FortiProxy