CVE-2023-48790
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Mar 11, 2025
CWE ID 352
Summary
CVE-2023-48790 is a cross-site request forgery (CSRF) vulnerability [CWE-352] affecting Fortinet FortiNDR versions 7.4.0, 7.2.0 through 7.2.1, and 7.1.0 through 7.1.1, as well as earlier releases before 7.0.5. An attacker can exploit this issue by crafting malicious HTTP GET requests to execute unauthorized actions on a victim's FortiNDR instance, potentially leading to serious consequences without the need for authentication.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Fortinet