Skip to content
OpenAdvisories
Unscored CVE-2018-1356 EUVD-2018-11935GHSA-2g3q-pfmx-p47f

A reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiSandbox before 3.0 may allow an attacker to execute unauthorized code…

Published Apr 9, 2019 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: FortiSandbox Category: Network devices

Description

A reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiSandbox before 3.0 may allow an attacker to execute unauthorized code or commands via the back_url parameter in the file scan component.

Affected products

VendorProductAffectedFixed
Fortinet FortiSandbox 2.5.2, 2.5.1, 2.5.0, 2.4.1, 2.4.0 —

References