CVE-2023-48790

Name of the Vulnerable Software and Affected Versions: Fortinet FortiNDR versions 7.1.0 through 7.1.1 Fortinet FortiNDR versions 7.2.0 through 7.2.1 Fortinet FortiNDR version 7.4.0 Fortinet FortiNDR versions prior to 7.0.5

Description: A cross-site request forgery vulnerability in Fortinet FortiNDR may allow a remote unauthenticated attacker to execute unauthorized actions via crafted HTTP GET requests.

Recommendations: For Fortinet FortiNDR versions 7.1.0 through 7.1.1, update to a version that fixes the vulnerability. For Fortinet FortiNDR versions 7.2.0 through 7.2.1, update to a version that fixes the vulnerability. For Fortinet FortiNDR version 7.4.0, update to a version that fixes the vulnerability. For Fortinet FortiNDR versions prior to 7.0.5, update to a version that fixes the vulnerability. As a temporary workaround, consider restricting access to vulnerable API endpoints until a patch is available. Avoid using crafted HTTP GET requests in the affected Fortinet FortiNDR versions until the issue is resolved.