CVE-2024-23671

No fix known EPSS 1%CVSS 7.9

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.3, FortiSandbox 4.2.1 through 4.2.6, FortiSandbox 4.0.0 through 4.0.4 allows attacker to execute unauthorized code or commands via crafted HTTP requests.

Published 2024-04-09 · CVE record · OSV

Products: Fortinet FortiSandbox