CVE-2024-23671

Summary

CVE-2024-23671 is a path traversal vulnerability affecting Fortinet FortiSandbox versions 4.4.0 through 4.4.3, 4.2.0 through 4.2.6, and 4.0.0 through 4.0.4. This issue stems from an improper limitation of user input, enabling an attacker to traverse restricted directories and execute unauthorized code or commands through crafted HTTP requests. Successful exploitation could lead to significant security compromises. Fortinet strongly advises users to update their FortiSandbox software to the latest version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.