Improper neutralization of HTML tags within the web interface of FortiManager and FortiAnalyzer could allow a remote attacker to execute a cross-site scripting (XSS) attack. The vulnerability stems from insecure handling of the Identity Provider name field, potentially impacting administrative dashboard security.
READ THE ORIGINAL ARTICLE AT FORTIGUARD.FORTINET.COM →