Skip to content
OpenAdvisories
High · 7.2 CVE-2024-27783 EUVD-2024-24976GHSA-h7v8-g696-gjw8

Multiple cross-site request forgery (CSRF) weaknesses [CWE-352] vulnerability in Fortinet FortiAIOps 2.0.0 may allow an unauthenticated rem…

Published Jul 9, 2024 · Updated Jan 9, 2026 · Assigned by fortinet

Description

Multiple cross-site request forgery (CSRF) weaknesses [CWE-352] vulnerability in Fortinet FortiAIOps 2.0.0 may allow an unauthenticated remote attacker to perform arbitrary actions on behalf of an authenticated user via tricking the victim to execute malicious GET requests.

Affected products

VendorProductAffectedFixed
Fortinet FortiAIOps 2.0.0 —

References