CVE-2024-48893 Information

Description

An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiSOAR 7.3.0 through 7.3.3 7.2.1 through 7.2.2 may allow an authenticated attacker to perform a stored cross site scripting (XSS) attack via the creation of malicious playbook.

Reference

https://fortiguard.fortinet.com/psirt/FG-IR-24-405