Medium · 5.4 CVE-2021-24014 EUVD-2021-10934GHSA-grhw-h243-368j

Multiple instances of improper neutralization of input during web page generation vulnerabilities in FortiSandbox before 4.0.0 may allow an…

Published Aug 4, 2021 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiSandbox Category: Network devices

Description

Multiple instances of improper neutralization of input during web page generation vulnerabilities in FortiSandbox before 4.0.0 may allow an unauthenticated attacker to perform an XSS attack via specifically crafted request parameters.

Affected products

Vendor	Product	Affected	Fixed
Fortinet	Fortinet FortiSandbox	FortiSandbox before 4.0.0	—

References

https://fortiguard.com/advisory/FG-IR-20-209