Description
Fortinet FortiSandbox contains an OS command injection vulnerability that could allow an unauthenticated attacker to execute unauthorized code or commands via crafted HTTP requests.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| FortiSandbox | Fortinet / FortiSandbox | >= 4.4.0, <= 4.4.8 | affected |
| FortiSandbox PaaS | Fortinet / FortiSandbox PaaS | 21.3.4055 | affected |
| FortiSandbox PaaS | Fortinet / FortiSandbox PaaS | 21.4.4072 | affected |
| FortiSandbox PaaS | Fortinet / FortiSandbox PaaS | 22.1.4113 | affected |
| FortiSandbox PaaS | Fortinet / FortiSandbox PaaS | 22.2.4134 | affected |
| FortiSandbox PaaS | Fortinet / FortiSandbox PaaS | 22.2.4151 | affected |
| FortiSandbox PaaS | Fortinet / FortiSandbox PaaS | 23.1.4245 | affected |
| FortiSandbox PaaS | Fortinet / FortiSandbox PaaS | 23.3.4329 | affected |
| FortiSandbox PaaS | Fortinet / FortiSandbox PaaS | 23.4.4350 | affected |
| FortiSandbox PaaS | Fortinet / FortiSandbox PaaS | 23.4.4374 | affected |