CVE-2018-1356 — Fortinet / FortiSandbox

Description (CNA)

A reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiSandbox before 3.0 may allow an attacker to execute unauthorized code or commands via the back_url parameter in the file scan component.

Affected (CNA)

Vendor / product	Versions
Fortinet / FortiSandbox	affected 2.5.2; affected 2.5.1; affected 2.5.0; affected 2.4.1; affected 2.4.0

CWE

No CWE identifiers supplied.

References

https://fortiguard.com/advisory/FG-IR-18-024
http://www.securityfocus.com/bid/107838

ADP enrichment

CVE

No English description supplied.

https://fortiguard.com/advisory/FG-IR-18-024
http://www.securityfocus.com/bid/107838

CISA-ADP

No English description supplied.

No references supplied.