CVE-2024-27783 HIGH

CVE-2024-27783

Vendor Fortinet
Product FortiAIOps
Weakness CWE-352 · CSRF
Published July 9, 2024
Last update January 9, 2026
View on NVD All CVEs

CVSS base score

7.2/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality High
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L/E:P/RL:U/RC:C

What the vulnerability does

01Description

Multiple cross-site request forgery (CSRF) weaknesses [CWE-352] vulnerability in Fortinet FortiAIOps 2.0.0 may allow an unauthenticated remote attacker to perform arbitrary actions on behalf of an authenticated user via tricking the victim to execute malicious GET requests.

Key dates

02Disclosure timeline

July 9, 2024 CVE published
January 9, 2026 Record updated