> Domain fronting protection bypass in explicit web proxy
[DATE: 14/10/2025 07:00]
[LANGUAGE: EN]
An Improperly Implemented Security Check for Standard vulnerability [CWE-358] in FortiOS and FortiProxy explicit web proxy may allow an authenticated proxy user to bypass the domain fronting protection feature via crafted HTTP requests. Revised on 2025-10-14 00:00:00