← Database

CVE-2022-23439

MEDIUM CVSS: 4.7 Published: 2025-01-22 Modified: 2026-06-17

Description

A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests, where the `Host` header points to an arbitrary webserver

Affected Platforms

Fortinet FortindrFortinet FortiadcFortinet FortiddosFortinet FortirecorderFortinet FortitesterFortinet FortiauthenticatorFortinet FortisoarFortinet FortiproxyFortinet FortiosFortinet Fortiswitch

Weakness Type

CWE-610

References