CVE-2021-24010

Improper limitation of a pathname to a restricted directory vulnerabilities in FortiSandbox 3.2.0 through 3.2.2, and 3.1.0 through 3.1.4 may allow an authenticated user to obtain unauthorized access to files and data via specifially crafted web requests.

Score

CVSS 3.1 8.1 High

Status

Modified - psirt@fortinet.com

Published

2021-08-04

Last modified

2024-10-25

Weaknesses

CWE-22, CWE-284

Affected products

• Fortinet Fortisandbox (Fortinet)
• Fortisandbox (Fortinet)

References

• https://fortiguard.com/advisory/FG-IR-20-202