Description (CNA)
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.8 may allow attacker to execute unauthorized code or commands via <insert attack vector here>
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Fortinet / FortiSandbox | affected 4.4.0 through 4.4.8 |
| Fortinet / FortiSandbox PaaS | affected 23.4.4374; affected 23.4.4350; affected 23.3.4329; affected 23.1.4245; affected 22.2.4151; affected 22.2.4134; affected 22.1.4113; affected 21.4.4072; affected 21.3.4055 |
CWE
CWE-78
References
ADP enrichment
No English description supplied.