Fortinet FortiSandbox Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability has been identified in Fortinet FortiSandbox versions 5.0.0 through 5.0.1, 4.4.0 through 4.4.7, 4.2 (all versions), and 4.0 (all versions). This vulnerability allows an unauthenticated attacker to execute commands by sending crafted requests.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of code or commands.

Remediation

Users of Fortinet FortiSandbox should upgrade to version 5.0.2 or above if they are on FortiSandbox 5.0, or to version 4.4.8 or above if they are on FortiSandbox 4.4. For FortiSandbox 4.2 and 4.0, users should migrate to a fixed release.