← CVE Intelligence

CVE-2024-54018

Fortinet / FortiSandbox PUBLISHED

Description (CNA)

Multiple improper neutralization of special elements used in an OS Command vulnerabilities [CWE-78] in FortiSandbox before 4.4.5 allows a privileged attacker to execute unauthorized commands via crafted requests.

Affected (CNA)

Vendor / productVersions
Fortinet / FortiSandboxaffected 4.4.0 through 4.4.4; affected 4.2.1 through 4.2.6; affected 4.0.0 through 4.0.6; affected 3.2.0 through 3.2.4

CWE

CWE-78

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.