Second-Order OS Command Injection via JSON Input on start vnc feature

An improper neutralization of special elements used in an OS command vulnerability CWE-78 in FortiSandbox, FortiSandbox Cloud and FortiSandbox PaaS WEB UI may allow an unauthenticated attacker to execute unauthorized commands via specifically crafted HTTP requests...