medium5.4
CVE-2021-24014
Multiple instances of improper neutralization of input during web page generation vulnerabilities in FortiSandbox before 4.0.0 may allow an unauthenticated att…
Impact
Multiple instances of improper neutralization of input during web page generation vulnerabilities in FortiSandbox before 4.0.0 may allow an unauthenticated attacker to perform an XSS attack via specifically crafted request parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortisandbox | through 3.1.4 from 3.2.0 before 3.2.3 |