Lucene search
FortinetCVELIST:CVE-2018-1356HistoryApr 09, 2019 - 8:55 p.m.
CVE-2018-1356
2019-04-0920:55:00
fortinet
www.cve.org
4
EPSS
0.001
Percentile
33.1%
A reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiSandbox before 3.0 may allow an attacker to execute unauthorized code or commands via the back_url parameter in the file scan component.
CNA Affected
[
{
"product": "FortiSandbox",
"vendor": "Fortinet",
"versions": [
{
"status": "affected",
"version": "2.5.2"
},
{
"status": "affected",
"version": "2.5.1"
},
{
"status": "affected",
"version": "2.5.0"
},
{
"status": "affected",
"version": "2.4.1"
},
{
"status": "affected",
"version": "2.4.0"
}
]
}
]Related
fortinet
fortinet
FortiSandbox reflected XSS in the file scan component
2019-04-03 00:00:00
nvd
nvd
CVE-2018-1356
2019-04-09 21:29:00
cve
cve
CVE-2018-1356
2019-04-09 21:29:00
prion
prion
Cross site scripting
2019-04-09 21:29:00