CVE-2023-48790 — Fortinet / FortiNDR

CVE-2023-48790

Fortinet / FortiNDR PUBLISHED

Description (CNA)

A cross site request forgery vulnerability [CWE-352] in Fortinet FortiNDR version 7.4.0, 7.2.0 through 7.2.1 and 7.1.0 through 7.1.1 and before 7.0.5 may allow a remote unauthenticated attacker to execute unauthorized actions via crafted HTTP GET requests.

Affected (CNA)

Vendor / product	Versions
Fortinet / FortiNDR	affected 7.4.0; affected 7.2.0 through 7.2.1; affected 7.1.0 through 7.1.1; affected 7.0.0 through 7.0.5; affected 1.5.0 through 1.5.3

CWE

CWE-352

References

https://fortiguard.fortinet.com/psirt/FG-IR-23-353

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.