EUVD-2018-11935

Malware in sbrugna...

The vulnerability of the file scan component in the FortiSandbox system, which is used for threat detection and remediation, allows a perpetrator to execute arbitrary code.

The vulnerability of the file scan component in the FortiSandbox threat detection and mitigation system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through the backurl parameter...