Sploitus

CVE-2018-13379

23 known exploits for CVE-2018-13379

An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal allows an unauthenticated attacker to download system files via special crafted HTTP resource requests.

Affected products
Fortigate, Fortios, Fortiproxy
Fortinet Fortiproxy
< 1.2.9, 2.0.0
Fortinet Fortios
< 5.4.13, 5.6.8, 6.0.5
Fix
Available
CVSS 3.1
9.8 CRITICAL
EPSS
100.0% (100th percentile)
Weakness
CWE-22
NVD status
Analyzed
Published
2019-06-04
CVE-2018-13379 at NVD
Authoritative description, scoring and affected products

23 known exploits for CVE-2018-13379

Proof-of-concept code and exploit modules indexed by Sploitus

MCATester
2026-06-24 sankarayougisrivastewar-sudoGITHUB
Exploit for Path Traversal in Fortinet Fortiproxy
2026-05-23 Instructor-AdminGITHUB
FortiGate-FortiWeb-Multi-Exploit-Extractor
2026-05-14 1337or420GITHUB
Exploit for Path Traversal in Fortinet Fortiproxy
2026-02-05 ZieraxGITHUB
Exploit for Server-Side Request Forgery in Microsoft
2026-01-27 SimoesCTTGITHUB
Exploit for Path Traversal in Vmware Cloud_Foundation
2026-01-27 SimoesCTTGITHUB
Exploit for Path Traversal in Fortinet Fortiproxy
2025-09-21 kh4sh3iGITHUB
FortiOS Path Traversal Credential Gatherer
2021-02-27 Meh Chang, Orange Tsai, lynx (Carlos Vieira), mekhalleh (RAMELLA Sébastien)METASPLOITRuby
Exploit for Path Traversal in Fortinet Fortiproxy
2020-12-14 B1anda0GITHUB
Fortiscan - A High Performance FortiGate SSL-VPN Vulnerability Scanning And Exploitation Tool
2020-11-30 KitPloitKITPLOIT
Exploit for Path Traversal in Fortinet Fortiproxy
2020-11-30 Zeop-CyberSecGITHUB
Exploit for Path Traversal in Fortinet Fortiproxy
2020-11-19 k4nfr3GITHUB
Exploit for Path Traversal in Fortinet Fortiproxy
2019-09-24 0xHunterGITHUB
FortiOS 5.6.3 - 5.6.7 / FortiOS 6.0.0 - 6.0.4 - Credentials Disclosure Exploit (2)
2019-08-19 Carlos VieiraZDTPython
FortiOS 5.6.3 - 5.6.7 / FortiOS 6.0.0 - 6.0.4 - Credentials Disclosure Exploit
2019-08-19 Carlos VieiraZDTRuby
FortiOS 5.6.3 - 5.6.7 FortiOS 6.0.0 - 6.0.4 - Credentials Disclosure
2019-08-19 Carlos E. VieiraEXPLOITPACKPython
FortiOS 5.6.3 - 5.6.7 FortiOS 6.0.0 - 6.0.4 - Credentials Disclosure (Metasploit)
2019-08-19 Carlos E. VieiraEXPLOITPACKRuby
Fortinet FortiOS 5.6.3 - 5.6.7 / FortiOS 6.0.0 - 6.0.4 - Credentials Disclosure (Metasploit)
2019-08-19 Carlos E. VieiraEXPLOITDBRuby
Fortinet FortiOS 5.6.3 - 5.6.7 / FortiOS 6.0.0 - 6.0.4 - Credentials Disclosure
2019-08-19 Carlos E. VieiraEXPLOITDBPython
FortiOS 5.6.7 / 6.0.4 Credential Disclosure
2019-08-19 Carlos E. VieiraPACKETSTORMPython
FortiOS 5.6.7 / 6.0.4 Credential Disclosure
2019-08-19 Carlos E. VieiraPACKETSTORMRuby
Fortinet FortiGate SSL VPN File Disclosure
2019-08-17 Dsquare SecurityD2
Exploit for Path Traversal in Fortinet Fortiproxy
2019-08-11 milo2012GITHUB