A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiSandbox version 4.4.1 and 4.4.0 and 4.2.0 through 4.2.5 and 4.0.0 through 4.0.3 and 3.2.0 through 3.2.4 and 3.1.0 through 3.1.5 and 3.0.0 through 3.0.7 and 2.5.0 through 2.5.2 and 2.4.1 allows attacker to execute unauthorized code or commands via crafted HTTP requests.
References
History

Tue, 22 Oct 2024 21:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'No', 'Exploitation': 'None', 'Technical Impact': 'Total'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: fortinet

Published: 2023-10-13T14:51:12.174Z

Updated: 2024-10-22T20:55:31.615Z

Reserved: 2023-08-30T13:42:39.547Z

Link: CVE-2023-41680

cve-icon Vulnrichment

Updated: 2024-08-02T19:01:35.429Z

cve-icon NVD

Status : Modified

Published: 2023-10-13T15:15:44.000

Modified: 2024-11-21T08:21:28.590

Link: CVE-2023-41680

cve-icon Redhat

No data.