OS Command Injection Vulnerability in FortiSandbox by Fortinet

CVE-2024-54018

What is CVE-2024-54018?

Multiple issues related to improper neutralization of special elements used in OS command contexts have been identified in FortiSandbox prior to version 4.4.5. These vulnerabilities enable a privileged attacker to craft requests that can execute unauthorized commands on the affected system, potentially leading to data breaches or other malicious activities. It’s crucial for users to update their systems promptly to mitigate the risk associated with this exploit. For more details, refer to the official Fortinet advisory.

References