CVE-2022-38374

This repository contains a functional exploit for CVE-2022-38374, which targets FortiADC. The exploit leverages an XSS vulnerability to achieve remote code execution (RCE) by sending a crafted payload that establishes a reverse shell.

This repository contains a functional exploit for CVE-2022-38374, which chains an XSS vulnerability in FortiADC to achieve remote code execution (RCE) via a reverse shell. The exploit constructs a malicious payload that leverages the AWS scripting interface and uses chunked encoding to bypass input restrictions.