CVE-2024-27783CWE-352

Multiple cross-site request forgery (CSRF) weaknesses [CWE-352] vulnerability in Fortinet FortiAIOps 2.0.0 may allow an unauthenticated remote attacker to…

High · published July 9, 2024

CVSS v3.1
7.2
EPSS
0%
Percentile
21.8
In the wild
Unconfirmed
What it is

Multiple cross-site request forgery (CSRF) weaknesses [CWE-352] vulnerability in Fortinet FortiAIOps 2.0.0 may allow an unauthenticated remote attacker to perform arbitrary actions on behalf of an authenticated user via tricking the victim to execute malicious GET requests.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L/E:P/RL:U/RC:C
CVSS v4.0
Not supplied
EPSS
0.00302 · 21.8th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2024-07-09T15:33Z
EPSS history
Timeline
  • 09 JUL 15:33Z
    Multiple cross-site request forgery (CSRF) weaknesses [CWE-352] vulnerability in Fortinet FortiAIOps 2.0.0 may allow an unauthenticated remote attacker to…
    cvelistv5