CVE-2020-29011

Instances of SQL Injection vulnerabilities in the checksum search and MTA-quarantine modules of FortiSandbox 3.2.0 through 3.2.2, and 3.1.0 through 3.1.4 may allow an authenticated attacker to execute unauthorized code on the underlying SQL interpreter via specifically crafted HTTP requests.

Score

CVSS 3.1 8.8 High

Status

Modified - psirt@fortinet.com

Published

2021-08-04

Last modified

2024-10-25

Weaknesses

CWE-89

Affected products

• Fortinet Fortisandbox (Fortinet)
• Fortisandbox (Fortinet)

References

• https://fortiguard.com/advisory/FG-IR-20-171