CVE-2023-45587: XSS
An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.2, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all versions allows attacker to execute unauthorized code or commands via crafted HTTP requests
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Fortinet FortiSandboxto a version that resolves this vulnerability.Fixed in 4.4.3
Event History
Frequently Asked Questions
What is the severity of CVE-2023-45587?
The severity of CVE-2023-45587 is categorized as critical, as it allows attackers to execute unauthorized code or commands.
How do I fix CVE-2023-45587?
To fix CVE-2023-45587, you should upgrade Fortinet FortiSandbox to the latest version available that addresses this vulnerability.
What versions of Fortinet FortiSandbox are affected by CVE-2023-45587?
CVE-2023-45587 affects FortiSandbox versions 3.1.0 through 4.4.1.
What type of vulnerability is CVE-2023-45587?
CVE-2023-45587 is classified as a cross-site scripting (XSS) vulnerability due to improper neutralization of input during web page generation.
Can CVE-2023-45587 lead to data breaches?
Yes, CVE-2023-45587 can lead to data breaches as it enables attackers to execute unauthorized actions that may compromise system security.