CVE-2023-41680

Summary

CVE-2023-41680 is a cross-site scripting (XSS) vulnerability affecting various versions of Fortinet FortiSandbox, including 4.4.1, 4.4.0, 4.2.0 through 4.2.5, 4.0.0 through 4.0.3, 3.2.0 through 3.2.4, 3.1.0 through 3.1.5, and 3.0.0 through 3.0.7, as well as 2.5.0 through 2.5.2 and 2.4.1. This flaw allows attackers to inject and execute malicious scripts on vulnerable web pages by sending crafted HTTP requests. The result is unauthorized code or command execution, posing a significant security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.