CVE-2021-24010

—

CVSS 3.1

6.5 medium

EPSS

<1%p58

Published

Aug 4, 2021 (Aug 4, 2021)

Modified

Jun 17, 2026

Description

Improper limitation of a pathname to a restricted directory vulnerabilities in FortiSandbox 3.2.0 through 3.2.2, and 3.1.0 through 3.1.4 may allow an authenticated user to obtain unauthorized access to files and data via specifially crafted web requests.

Vendors: fortinet
Products: fortisandbox
Weakness: CWE-22
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.