CVE-2023-25609

4.3MEDIUM

A server-side request forgery (SSRF) vulnerability [CWE-918] in FortiManager and FortiAnalyzer GUI 7.2.0 through 7.2.1, 7.0.0 through 7.0.6, 6.4.8 through 6.4.11 may allow a remote and authenticated a

发布于: 6/13/2023更新于: 11/21/2024
在NVD查看在MITRE查看

描述

A server-side request forgery (SSRF) vulnerability [CWE-918] in FortiManager and FortiAnalyzer GUI 7.2.0 through 7.2.1, 7.0.0 through 7.0.6, 6.4.8 through 6.4.11 may allow a remote and authenticated attacker to access unauthorized files and services on the system via specially crafted web requests.

AI分析AI驱动

受影响产品

fortinetfortianalyzer
fortinetfortianalyzer
fortinetfortianalyzer
7.2.0
fortinetfortianalyzer
7.2.1
fortinetfortimanager
fortinetfortimanager
fortinetfortimanager
7.2.0
fortinetfortimanager
7.2.1

参考资料