CVE-2023-45587

Summary

CVE-2023-45587 is a cross-site scripting (XSS) vulnerability affecting Fortinet FortiSandbox versions 4.4.1, 4.4.0, 4.2.0 through 4.2.5, 4.0.0 through 4.0.3, 3.2.0 through 3.2.4, and 3.1.0 through 3.1.5. This issue stems from improper input neutralization during web page generation, enabling attackers to inject and execute unauthorized code or commands via crafted HTTP requests. Successful exploitation could lead to serious security consequences, including data theft, unauthorized access, or system compromise. Users are advised to upgrade to the latest FortiSandbox version to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.