VYPR
← All advisories
High severity8.1NVD Advisory· Published Aug 4, 2021· Updated Jun 17, 2026

CVE-2021-24010

CVE-2021-24010

Description

Improper limitation of a pathname to a restricted directory vulnerabilities in FortiSandbox 3.2.0 through 3.2.2, and 3.1.0 through 3.1.4 may allow an authenticated user to obtain unauthorized access to files and data via specifially crafted web requests.

Affected products

3
  • Fortinet/Fortisandbox3 versions
    cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*range: >=3.1.0,<3.1.5
    • (no CPE)range: 3.2.0-3.2.2, 3.1.0-3.1.4
    • (no CPE)range: FortiSandbox 3.2.2, 3.2.1, 3.2.0, 3.1.4, 3.1.3, 3.1.2, 3.1.1, 3.1.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.