FortiSandbox - Arbitrary file delete on endpoint

An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in FortiSandbox may allow an authenticated attacker with at least read-only permission to delete arbitrary files via crafted HTTP requests.

arbitrary files attacker cwe delete directory endpoint file files http http requests may path path traversal permission requests restricted vulnerability