Skip to content
fr Sign in
7.1 High

CVE-2023-48790 A cross site request forgery vulnerability [CWE-352] in Fortinet FortiNDR version 7.4.0, 7.2.0 through 7.2.1 and 7.1.0…

Description

A cross site request forgery vulnerability [CWE-352] in Fortinet FortiNDR version 7.4.0, 7.2.0 through 7.2.1 and 7.1.0 through 7.1.1 and before 7.0.5 may allow a remote unauthenticated attacker to execute unauthorized actions via crafted HTTP GET requests.

Affected products and versions

Product Affected versions Fixed in
FortiNDR 7.4.0 No fix stated
FortiNDR 7.2 7.2.0 → 7.2.1 No fix stated
FortiNDR 7.1 7.1.0 → 7.1.1 No fix stated
FortiNDR 7.0 7.0.0 → 7.0.5 No fix stated
FortiNDR 1.5 1.5.0 → 1.5.3 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of FortiNDR

The 13 CVEs of FortiNDR →
CVE-2026-25088 An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet… 5.1 Medium CVE-2024-23104 An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiNDR 7.6.0, FortiNDR 7.4.0… 5.4 Medium CVE-2024-47569 A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail… 4.2 Medium CVE-2024-40588 Multiple relative path traversal vulnerabilities [CWE-23] vulnerability in Fortinet FortiCamera 2.1 all versions,… 4.2 Medium
Track this CVE