Path Traversal Vulnerability in Fortinet FortiSandbox Products
CVE-2023-41682

7.9HIGH

Key Information:

Vendor

Fortinet
Status
Fortisandbox
Vendor
CVE Published:
13 October 2023

What is CVE-2023-41682?

A path traversal vulnerability in Fortinet FortiSandbox allows an attacker to craft HTTP requests that manipulate the pathname, potentially leading to a denial of service. This flaw is present across multiple versions of the FortiSandbox product line, including versions from 4.4.0 down to 2.4.0. Exploitation of this vulnerability could significantly impact the availability of the affected system.

Affected Version(s)

FortiSandbox 4.4.0

FortiSandbox 4.2.0 <= 4.2.5

FortiSandbox 4.0.0 <= 4.0.3

References

https://fortiguard.com/psirt/FG-IR-23-280

CVSS V3.1

Score:
7.9
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.