CVE-2018-1356

A reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiSandbox before 3.0 may allow an attacker to execute unauthorized code or commands via the back_url parameter in the file scan component.

Score

CVSS 3.0 6.1 Medium

Status

Modified - psirt@fortinet.com

Published

2019-04-09

Last modified

2024-10-25

Weaknesses

CWE-79

Affected products

• Fortisandbox (Fortinet)

References

• http://www.securityfocus.com/bid/107838
• https://fortiguard.com/advisory/FG-IR-18-024