Cross-Site Scripting Vulnerability in Fortinet FortiSandbox
CVE-2023-41843

7.3HIGH

Key Information:

Vendor
Fortinet
Vendor
CVE Published:
13 October 2023

Summary

A cross-site scripting vulnerability exists in Fortinet FortiSandbox across several versions, including 4.4.1, 4.4.0, 4.2.0 through 4.2.5, and 4.0.0 through 4.0.3. This vulnerability arises from improper neutralization of user inputs during web page generation, enabling malicious actors to execute unauthorized code or commands through specially crafted HTTP requests. Organizations using the affected versions are encouraged to implement the necessary security measures to safeguard their systems.

Affected Version(s)

FortiSandbox 4.4.0 <= 4.4.1

FortiSandbox 4.2.0 <= 4.2.5

FortiSandbox 4.0.0 <= 4.0.3

References

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.