Exploit for cve2018-13379-nmap-script

kitploit · 2026-08-25

Description

Path traversal in FortiOS SSL VPN web portal allows unauthenticated system file download.

Entry point

Parameterlang · query param

Path/remote/fgt_lang

Path traversal vulnerability in FortiOS SSL VPN web portal allows reading restricted files via crafted HTTP requests.

Affected software

Fortinet Fortiproxy< 1.2.9, 2.0.0

Fortinet Fortios< 5.4.13, 5.6.8, 6.0.5

All known vulnerabilities by product

Fortigate Fortios Fortiproxy

CVSS 9.8 for CVE-2018-13379

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:NONE

Availability:HIGH

Exploit Details

Modified:2026-08-25 06:02

Last Seen:2026-08-26 02:50

Reporter:KitPloit

Tags

Fortinet FortiOSPath traversalSSL VPNUnauthenticatedFile disclosureHTTP requests

Other exploits for CVE-2018-13379

CVE-2018-13379-Fortinet

2026-09-03 KitPloitKITPLOIT

at-doom-fortigate

2026-09-03 KitPloitKITPLOIT

2026-09-03 KitPloitKITPLOIT

2026-09-03 KitPloitKITPLOIT

2026-09-02 KitPloitKITPLOIT

2026-09-02 KitPloitKITPLOIT

2026-09-01 KitPloitKITPLOIT

CVE-2018-13379-FortinetVPN

2026-09-01 KitPloitKITPLOIT

Exploit Code

MARKDOWN6 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-BLAZZ3-CVE2018-13379-NMAP-SCRIPT
# cve2018-13379-nmap-script

CVE-2018-13379 Скрипт для Nmap NSE

Неправильное ограничение пути к каталогу ("Path Traversal") в Fortinet FortiOS версий с 6.0.0 по 6.0.4 и с 5.6.3 по 5.6.7 в веб-портале SSL VPN позволяет неаутентифицированному злоумышленнику загружать системные файлы с помощью специально созданных HTTP-запросов ресурсов.