CVE-2023-48786
4.3MEDIUMA server-side request forgery vulnerability [CWE-918] in Fortinet FortiClientEMS version 7.4.0 through 7.4.2 and before 7.2.6 may allow an authenticated attacker to perform internal requests via craft
게시됨: 6/10/2025업데이트됨: 7/16/2025
설명
A server-side request forgery vulnerability [CWE-918] in Fortinet FortiClientEMS version 7.4.0 through 7.4.2 and before 7.2.6 may allow an authenticated attacker to perform internal requests via crafted HTTP or HTTPS requests.
AI 분석AI 기반
영향받는 제품
fortinetforticlientems
fortinetforticlientems
fortinetforticlientems
fortinetforticlientems
참조
- https://fortiguard.fortinet.com/psirt/FG-IR-23-342Vendor Advisory