Cross-Site Scripting Vulnerability in Fortinet FortiSandbox
CVE-2023-41843

7.3HIGH

Key Information:

Vendor

Fortinet
Status
Fortisandbox
Vendor
CVE Published:
13 October 2023

What is CVE-2023-41843?

A cross-site scripting vulnerability exists in Fortinet FortiSandbox across several versions, including 4.4.1, 4.4.0, 4.2.0 through 4.2.5, and 4.0.0 through 4.0.3. This vulnerability arises from improper neutralization of user inputs during web page generation, enabling malicious actors to execute unauthorized code or commands through specially crafted HTTP requests. Organizations using the affected versions are encouraged to implement the necessary security measures to safeguard their systems.

Affected Version(s)

FortiSandbox 4.4.0 <= 4.4.1

FortiSandbox 4.2.0 <= 4.2.5

FortiSandbox 4.0.0 <= 4.0.3

References

https://fortiguard.com/psirt/FG-IR-23-273

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.