.. / CVE-2021-22122

• XSS
• Nuclei
• Web

Exploit for FortiWeb - Cross Site Scripting (CVE-2021-22122)

Description:

FortiWeb 6.3.0 through 6.3.7 and versions before 6.2.4 contain an unauthenticated cross-site scripting vulnerability. Improper neutralization of input during web page generation can allow a remote attacker to inject malicious payload in vulnerable API end-points.

Nuclei Template

View the template here CVE-2021-22122.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-22122.yaml

References: