description: A reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiSandbox before 3.0 may allow an attacker to execute unauthorized code or commands via the back_url parameter in the file scan component.
problem types: Execute unauthorized code or commands
affected:
{
product: FortiSandbox
vendor: Fortinet
versions:
status: affected, version: 2.5.2
status: affected, version: 2.5.1
status: affected, version: 2.5.0
status: affected, version: 2.4.1
status: affected, version: 2.4.0
}