CVE-2018-13379

VendorfortinetProductfortios, fortiproxyDiscoveredJun 4, 2019UpdatedOct 24, 2025

An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal allows an unauthenticated attacker to download system files via special crafted HTTP resource requests.

View graph Watch Export

CVSS v3.1

9.1 CRITICAL

EPSS

99.9%

probability of exploitation in 30 days

CISA KEV

Listed

confirmed active exploitation

News coverage

sources referencing this CVE

Related IOCs

seen in the same coverage

CVSS v3.1 Detail

Attack VectorNETWORK

Attack ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

ScopeUNCHANGED

ConfidentialityHIGH

IntegrityNONE

AvailabilityHIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Connections

4 relationships

CWE-22

source

Timeline

disclosure → media coverage

Jun 4, 2019

Disclosure — published as a CVE record. · last revised by NVD Oct 24, 2025

Sep 15, 2026

securityweek.com reports: Thai Broadband Provider Hacked via Fortinet Vulnerability

Public PoC (10)

github.com/milo2012/CVE-2018-13379 github.com/jpiechowka/at-doom-fortigate github.com/0xHunter/FortiOS-Credentials-Disclosure github.com/Blazz3/cve2018-13379-nmap-script github.com/yukar1z0e/CVE-2018-13379 github.com/pwn3z/CVE-2018-13379-FortinetVPN github.com/k4nfr3/CVE-2018-13379-Fortinet github.com/Zeop-CyberSec/fortios_vpnssl_traversal_leak github.com/B1anda0/CVE-2018-13379 github.com/nivdolgin/CVE-2018-13379

Unverified third-party code — review before executing.