CVE-2024-27783
Multiple cross-site request forgery (CSRF) weaknesses [CWE-352] vulnerability in Fortinet FortiAIOps 2.0.0 may allow an unauthenticated remote attacker to perform arbitrary actions on behalf of an aut
Severity
High 7.2
CVSS 3.1
Exploited
Not listed
EPSS
0.003
23.2th percentile
Discovered by
Vendor
Vendor advisory field
Published
Jul 9, 2024
Assigned by fortinet
Description
Multiple cross-site request forgery (CSRF) weaknesses [CWE-352] vulnerability in Fortinet FortiAIOps 2.0.0 may allow an unauthenticated remote attacker to perform arbitrary actions on behalf of an authenticated user via tricking the victim to execute malicious GET requests.
Weakness: CWE-352
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Fortinet | FortiAIOps | Network & Security Management | cna-assigner |
Vendor-reported products (1)
- Fortinet · FortiAIOps
Credit
Internally discovered and reported by Shripal Rawal of Fortinet PSIRT team.
Vendor remediation
Upgrade to FortiAIOps version 2.0.1 or above