Fortinet FortiSandbox and FortiSandbox PaaS Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in Fortinet FortiSandbox versions 5.0.0 to 5.0.4, as well as FortiSandbox PaaS versions 5.0.0 to 5.0.4. This vulnerability allows an attacker to perform an XSS attack by sending crafted HTTP requests.

Impact

Exploitation of this vulnerability allows for cross-site scripting attacks, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Remediation

Users are advised to upgrade Fortinet FortiSandbox to version 5.0.5 or above. For FortiSandbox PaaS, upgrade to version 5.0.5 or above.