Exploit for Path Traversal in Fortinet Fortiproxy

githubexploit · 2019-09-24

Description

CVE-2018-13379 path traversal exposes credentials in Fortinet FortiProxy products.

Entry point

Parameterlang · query param

Path/remote/fgt_lang

Path traversal in FortiOS SSL VPN web portal enabling unauthorized file read via crafted HTTP request.

Affected software

Fortinet Fortiproxy< 1.2.9, 2.0.0

Fortinet Fortios< 5.4.13, 5.6.8, 6.0.5

All known vulnerabilities by product

Fortigate Fortios Fortiproxy

CVSS 9.8 for CVE-2018-13379

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:NONE

Availability:HIGH

Working code

65%confidence this exploit runs

Based on 3 file(s) in the source

EPSS Score

100.0%higher than 100.0% of all CVEs

Updated 2026-06-16

Exploit Details

Modified:2025-04-29 20:14

Last Seen:2025-08-31 23:36

Reporter:0xHunter

Written in:Python

Last commit:2019-09-24

Tags

fortinet fortiproxypath traversalcredentials disclosure

Other exploits for CVE-2018-13379

2026-06-24 sankarayougisrivastewar-sudoGITHUB

Exploit for Path Traversal in Fortinet Fortiproxy

2026-05-23 Instructor-AdminGITHUB

FortiGate-FortiWeb-Multi-Exploit-Extractor

2026-05-14 1337or420GITHUB

Exploit for Path Traversal in Fortinet Fortiproxy

2026-02-05 ZieraxGITHUB

Exploit for Server-Side Request Forgery in Microsoft

2026-01-27 SimoesCTTGITHUB

Exploit for Path Traversal in Vmware Cloud_Foundation

2026-01-27 SimoesCTTGITHUB

Exploit for Path Traversal in Fortinet Fortiproxy

2025-09-21 kh4sh3iGITHUB

FortiOS Path Traversal Credential Gatherer

2021-02-27 Meh Chang, Orange Tsai, lynx (Carlos Vieira), mekhalleh (RAMELLA Sébastien)METASPLOITRuby

Exploit Code

README5 lines

## https://sploitus.com/exploit?id=F27328AA-1825-57E0-A18A-AF0F9B9C005C
# FortiOS-Credentials-Disclosure
CVE-2018-13379 Exploit

Usage : python CVE-2018-13379.py list.txt