CVE-2024-27783

—

CVSS 3.1

8.8 high

EPSS

<1%p23

Published

Jul 9, 2024 (Jul 9, 2024)

Modified

Jun 17, 2026

Description

Multiple cross-site request forgery (CSRF) weaknesses [CWE-352] vulnerability in Fortinet FortiAIOps 2.0.0 may allow an unauthenticated remote attacker to perform arbitrary actions on behalf of an authenticated user via tricking the victim to execute malicious GET requests.

Vendors: fortinet
Products: fortiaiops
Weakness: CWE-352
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.