CVE-2024-23671 — Fortinet / FortiSandbox

CVE-2024-23671

Fortinet / FortiSandbox PUBLISHED

Description (CNA)

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.3, FortiSandbox 4.2.1 through 4.2.6, FortiSandbox 4.0.0 through 4.0.4 allows attacker to execute unauthorized code or commands via crafted HTTP requests.

Affected (CNA)

Vendor / product	Versions
Fortinet / FortiSandbox	affected 4.4.0 through 4.4.3; affected 4.2.1 through 4.2.6; affected 4.0.0 through 4.0.4

CWE

CWE-22

References

https://fortiguard.com/psirt/FG-IR-23-454

ADP enrichment

CVE

No English description supplied.

https://fortiguard.com/psirt/FG-IR-23-454

CISA-ADP

No English description supplied.

No references supplied.