high8.1
CVE-2021-24010
Improper limitation of a pathname to a restricted directory vulnerabilities in FortiSandbox 3.2.0 through 3.2.2, and 3.1.0 through 3.1.4 may allow an authentic…
Impact
Improper limitation of a pathname to a restricted directory vulnerabilities in FortiSandbox 3.2.0 through 3.2.2, and 3.1.0 through 3.1.4 may allow an authenticated user to obtain unauthorized access to files and data via specifially crafted web requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortisandbox | from 3.1.0 before 3.1.5 from 3.2.0 before 3.2.3 |