Exploit for Path Traversal in Fortinet Fortiproxy

githubexploit · 2020-12-14

Description

Please provide an array of objects with id and description for processing.

Entry point

Parameterlang · query param

Path/remote/fgt_lang

Path traversal in FortiOS SSL VPN web portal enabling unauthorized file read via crafted HTTP request.

Affected software

Fortinet Fortiproxy< 1.2.9, 2.0.0

Fortinet Fortios< 5.4.13, 5.6.8, 6.0.5

All known vulnerabilities by product

Fortigate Fortios Fortiproxy

CVSS 9.8 for CVE-2018-13379

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:NONE

Availability:HIGH

Working code

98%confidence this exploit runs

Based on 2 file(s) in the source

EPSS Score

100.0%higher than 100.0% of all CVEs

Updated 2026-06-16

Exploit Details

Modified:2024-10-05 09:15

Last Seen:2025-08-31 23:51

Reporter:B1anda0

Written in:Python

Last commit:2020-12-14

Tags

requestinput format

Other exploits for CVE-2018-13379

2026-06-24 sankarayougisrivastewar-sudoGITHUB

Exploit for Path Traversal in Fortinet Fortiproxy

2026-05-23 Instructor-AdminGITHUB

FortiGate-FortiWeb-Multi-Exploit-Extractor

2026-05-14 1337or420GITHUB

Exploit for Path Traversal in Fortinet Fortiproxy

2026-02-05 ZieraxGITHUB

Exploit for Server-Side Request Forgery in Microsoft

2026-01-27 SimoesCTTGITHUB

Exploit for Path Traversal in Vmware Cloud_Foundation

2026-01-27 SimoesCTTGITHUB

Exploit for Path Traversal in Fortinet Fortiproxy

2025-09-21 kh4sh3iGITHUB

FortiOS Path Traversal Credential Gatherer

2021-02-27 Meh Chang, Orange Tsai, lynx (Carlos Vieira), mekhalleh (RAMELLA Sébastien)METASPLOITRuby

Exploit Code

README10 lines

## https://sploitus.com/exploit?id=01DA9660-6518-515F-8B1D-245590DED6BF
## Usage & Disclaimer

This script is a batch detection tool for the Fortinet FortiOS path traversal vulnerability (CVE-2018-13379). Usage: `Python CVE-2018-13379.py url.txt`.

The vulnerability addresses are listed in vul.txt.

##### Affected Versions:

Fortinet FortiOS versions 5.6.3 to 5.6.7, and 6.0.0 to 6.0.4 are affected by this vulnerability. The vulnerability arises from the system’s failure to properly filter special characters in resource or file paths, allowing attackers to access locations outside of the restricted directories. This tool is intended only for security personnel’s safety testing. Any direct or indirect consequences or losses caused by unauthorized detection are the responsibility of the user.