← CVE Intelligence

CVE-2025-67685

Fortinet / FortiSandbox PUBLISHED

Description (CNA)

A Server-Side Request Forgery (SSRF) vulnerability [CWE-918] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.4, FortiSandbox 4.4 all versions, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions may allow an authenticated attacker to proxy internal requests limited to plaintext endpoints only via crafted HTTP requests.

Affected (CNA)

Vendor / productVersions
Fortinet / FortiSandboxaffected 5.0.0 through 5.0.4; affected 4.4.0 through 4.4.8; affected 4.2.1 through 4.2.8; affected 4.0.0 through 4.0.6

CWE

CWE-918

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.