Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5xf4-mvc2-mx6c

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

An improper neutralization of special elements used in an OS Command vulnerability in FortiSandbox 3.2.0 through 3.2.2, 3.1.0 through 3.1.4, and 3.0.0 through 3.0.6 may allow an authenticated attacker with access to the web GUI to execute unauthorized code or commands via specifically crafted HTTP requests.

An improper neutralization of special elements used in an OS Command vulnerability in FortiSandbox 3.2.0 through 3.2.2, 3.1.0 through 3.1.4, and 3.0.0 through 3.0.6 may allow an authenticated attacker with access to the web GUI to execute unauthorized code or commands via specifically crafted HTTP requests.

EPSS

Процентиль: 62%
0.00434
Низкий

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 8.8
nvd
больше 4 лет назад

An improper neutralization of special elements used in an OS Command vulnerability in FortiSandbox 3.2.0 through 3.2.2, 3.1.0 through 3.1.4, and 3.0.0 through 3.0.6 may allow an authenticated attacker with access to the web GUI to execute unauthorized code or commands via specifically crafted HTTP requests.

CVSS3: 8.8
fstec
больше 4 лет назад

Уязвимость веб-интерфейса системы выявления и устранения угроз FortiSandbox, позволяющая нарушителю выполнить произвольные команды

EPSS

Процентиль: 62%
0.00434
Низкий

Дефекты

CWE-78