CVE-2023-41844

A improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.2, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all versions, FortiSandbox 3.0.4 and above...

CVE-2023-41844

The CVE-2023-41844 entry corresponds to a Cross-Site Scripting (XSS) vulnerability in Fortinet FortiSandbox where improper neutralization of input during web page generation allows an attacker to run unauthorized commands via crafted HTTP requests to the capture traffic endpoint. Connected source...