Vulnerabilities > Fortinet > Fortisandbox > 1.2.0

DATE CVE VULNERABILITY TITLE RISK
2019-04-09 CVE-2018-1356 Cross-site Scripting vulnerability in Fortinet Fortisandbox
A reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiSandbox before 3.0 may allow an attacker to execute unauthorized code or commands via the back_url parameter in the file scan component.
network
low complexity
fortinet CWE-79
6.1