Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2023-48790

A cross site request forgery vulnerability [CWE-352] in Fortinet FortiNDR version 7.4.0, 7.2.0 through 7.2.1 and 7.1.0 through 7.1.1 and before 7.0.5 may allow a remote unauthentic

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
fortinet

Description

A cross site request forgery vulnerability [CWE-352] in Fortinet FortiNDR version 7.4.0, 7.2.0 through 7.2.1 and 7.1.0 through 7.1.1 and before 7.0.5 may allow a remote unauthenticated attacker to execute unauthorized actions via crafted HTTP GET requests.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Fortinet FortiNDR

Default version status: unaffected

  • 7.4.0affected
  • 7.2.0 to ≤ 7.2.1affected
  • 7.1.0 to ≤ 7.1.1affected
  • 7.0.0 to ≤ 7.0.5affected
  • 1.5.0 to ≤ 1.5.3affected

References