ID:10767 - Exploit for Resource exhaustion in FortiRecorder - CVE-2022-41333

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to uncontrolled consumption of internal resources in FortiRecorder login authentication mechanism. A remote attacker can send specially crafted HTTP GET requests to the system and perform a denial of service (DoS) attack.

Remediation