CVE-2018-1356

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiSandbox before 3.0 may allow an attacker to execute unauthorized code or commands via the back_url parameter in the file scan component.

Metrics

CVSS 3.0 6.1/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

VendorProductVersions
FortinetFortiSandbox2.5.2; 2.5.1; 2.5.0; 2.4.1; 2.4.0

References

Timeline

Published
Apr 9, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-135607.5The mintToken function of a smart contract implementation for KelvinToken, an Ethereum token, has an integer overflow that allows the owner CVE-2018-135617.5The mintToken function of a smart contract implementation for YourCoin (ICO) (Contract Name: ETH033), an Ethereum token, has an integer overCVE-2018-135627.5The mintToken function of a smart contract implementation for BMVCoin, an Ethereum token, has an integer overflow that allows the owner of tCVE-2018-135637.5The mintToken function of a smart contract implementation for UPayToken, an Ethereum token, has an integer overflow that allows the owner ofCVE-2018-135647.5The mintToken function of a smart contract implementation for GATcoin, an Ethereum token, has an integer overflow that allows the owner of tCVE-2018-135657.5The mintToken function of a smart contract implementation for Co2Bit, an Ethereum token, has an integer overflow that allows the owner of thCVE-2018-135667.5The mintToken function of a smart contract implementation for RETNToken, an Ethereum token, has an integer overflow that allows the owner ofCVE-2018-135677.5The mintToken function of a smart contract implementation for SDR, an Ethereum token, has an integer overflow that allows the owner of the cCVE-2018-135687.5The mintToken function of a smart contract implementation for MktCoin, an Ethereum token, has an integer overflow that allows the owner of tCVE-2018-135697.5The mintToken function of a smart contract implementation for HitToken, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-135707.5The mint function of a smart contract implementation for kkTestCoin1 (KTC1), an Ethereum token, has an integer overflow that allows the owneCVE-2018-135717.5The mintToken function of a smart contract implementation for GoramCoin, an Ethereum token, has an integer overflow that allows the owner of
CVE-2018-1356: Medium severity, CVSS 6.1 | Vulnix