{"id":"CVE-2023-48790","state":"PUBLISHED","title":"A cross site request forgery vulnerability [CWE-352] in Fortinet FortiNDR version 7.4.0, 7.2.0 through 7.2.1 and 7.1.0 through 7.1.1 and before 7.0.5 may allow a remote unauthentic","description":"A cross site request forgery vulnerability [CWE-352] in Fortinet FortiNDR version 7.4.0, 7.2.0 through 7.2.1 and 7.1.0 through 7.1.1 and before 7.0.5 may allow a remote unauthenticated attacker to execute unauthorized actions via crafted HTTP GET requests.","publishedAt":"2025-03-11T14:54:31.599Z","updatedAt":"2025-03-11T16:05:58.718Z","severity":{"score":7.1,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:X/RC:X","source":"fortinet"},"assigner":"fortinet","products":["Fortinet FortiNDR"],"affected":[{"vendor":"Fortinet","product":"FortiNDR","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","status":"affected","lessThanOrEqual":"7.2.1","versionType":"semver"},{"version":"7.1.0","status":"affected","lessThanOrEqual":"7.1.1","versionType":"semver"},{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.0.5","versionType":"semver"},{"version":"1.5.0","status":"affected","lessThanOrEqual":"1.5.3","versionType":"semver"}],"cpes":[]}],"references":["https://fortiguard.fortinet.com/psirt/FG-IR-23-353"],"weaknesses":["CWE-352"],"ingestedAt":"2026-10-29T20:06:24.729Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/48xxx/CVE-2023-48790.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-48790","state":"PUBLISHED","datePublished":"2025-03-11T14:54:31.599Z","dateUpdated":"2025-03-11T16:05:58.718Z","assignerShortName":"fortinet","assignerOrgId":"6abe59d8-c742-4dff-8ce8-9b0ca1073da8","dateReserved":"2023-11-19T19:58:38.554Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A cross site request forgery vulnerability [CWE-352] in Fortinet FortiNDR version 7.4.0, 7.2.0 through 7.2.1 and 7.1.0 through 7.1.1 and before 7.0.5 may allow a remote unauthenticated attacker to execute unauthorized actions via crafted HTTP GET requests."}],"affected":[{"vendor":"Fortinet","product":"FortiNDR","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","status":"affected","lessThanOrEqual":"7.2.1","versionType":"semver"},{"version":"7.1.0","status":"affected","lessThanOrEqual":"7.1.1","versionType":"semver"},{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.0.5","versionType":"semver"},{"version":"1.5.0","status":"affected","lessThanOrEqual":"1.5.3","versionType":"semver"}],"cpes":[]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-353","name":"https://fortiguard.fortinet.com/psirt/FG-IR-23-353"}],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:X/RC:X"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-352","lang":"en","description":"Execute unauthorized code or commands","type":"CWE"}]}],"providerMetadata":{"shortName":"fortinet","orgId":"6abe59d8-c742-4dff-8ce8-9b0ca1073da8","dateUpdated":"2025-03-11T14:54:31.599Z"},"solutions":[{"lang":"en","value":"Please upgrade to FortiNDR version 7.4.1 or above \nPlease upgrade to FortiNDR version 7.2.2 or above \nPlease upgrade to FortiNDR version 7.1.2 or above \nPlease upgrade to FortiNDR version 7.0.6 or above"}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-03-11T16:03:35.954580Z","id":"CVE-2023-48790","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-03-11T16:05:58.718Z"}}]}}}