✕
Request a Demo
Rewterz
Rewterz Threat Advisory – PHP Multiple Denial of Service Vulnerabilities
April 5, 2019
Rewterz
Rewterz Threat Advisory – Google Chrome V8 Arbitrary Code Execution Vulnerability
April 5, 2019

Rewterz Threat Advisory – CVE-2018-1356 – Fortinet FortiSandbox “back_url” Cross-Site Scripting Vulnerability

Severity

Medium

Analysis Summary

CVE-2018-1356

Input passed via the “back_url” parameter in the file scan component is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user’s browser session in context of an affected site.

Impact

Cross Site Scripting

Affected Vendors

Fortinet

Affected Products

Fortinet FortiSandbox 2.x

Remediation

Upgrade to version 3.0.0 or later.