CVE-2023-41682

Summary

CVE-2023-41682 is a path traversal vulnerability affecting Fortinet FortiSandbox versions 4.2.0 through 4.2.5, 4.0.0 through 4.0.3, 3.2.0 through 3.2.4, 2.5.0 through 2.5.2, and 2.4.1 and 2.4.0. This issue arises from an improper limitation of a pathname, allowing attackers to traverse restricted directories and trigger a denial-of-service condition through crafted HTTP requests. Successful exploitation may result in the FortiSandbox system becoming unresponsive and unavailable to users. It is essential that Fortinet users upgrade to the latest software version to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.