CVE-2018-1356

Publication date

2019-04-09 20:55:00

Family

fortinet

State

PUBLISHED

Description

A reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiSandbox before 3.0 may allow an attacker to execute unauthorized code or commands via the back_url parameter in the file scan component.