Description
A reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiSandbox before 3.0 may allow an attacker to execute unauthorized code or commands via the back_url parameter in the file scan component.
Problem types
Execute unauthorized code or commands
Product status
2.5.1
2.5.0
2.4.1
2.4.0
References
fortiguard.com/advisory/FG-IR-18-024
www.securityfocus.com/bid/107838 (107838)
