CVE-2025-25255

Fortinet / FortiOS PUBLISHED

Description (CNA)

An Improperly Implemented Security Check for Standard vulnerability [CWE-358] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.11, FortiProxy 7.2 all versions, FortiProxy 7.0.1 through 7.0.22 may allow an unauthenticated proxy user to bypass the domain fronting protection feature via crafted HTTP requests.

Affected (CNA)

Vendor / product	Versions
Fortinet / FortiOS	affected 7.6.0 through 7.6.3
Fortinet / FortiProxy	affected 7.6.0 through 7.6.3; affected 7.4.0 through 7.4.11; affected 7.2.0 through 7.2.15; affected 7.0.1 through 7.0.22

CWE

CWE-358

References

https://fortiguard.fortinet.com/psirt/FG-IR-24-372

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.