CVE-2024-27783: CSRF
Published Jul 9, 2024
·Updated
Multiple cross-site request forgery (CSRF) weaknesses [CWE-352] vulnerability in Fortinet FortiAIOps 2.0.0 may allow an unauthenticated remote attacker to perform arbitrary actions on behalf of an authenticated user via tricking the victim to execute malicious GET requests.
Affected Software
1 affected component
Fortinet FortiAIOps=2.0.0
Remediation
Information
Upgrade to FortiAIOps version 2.0.1 or above
Event History
Jul 9, 2024
CVE Published
via MITRE·03:33 PM
Data Sourced
via MITRE·03:33 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-27783?
CVE-2024-27783 has a high severity rating due to its potential impact on authenticated users through arbitrary actions by attackers.
2
How do I fix CVE-2024-27783?
To fix CVE-2024-27783, users should upgrade FortiAIOps to a patched version that addresses these CSRF vulnerabilities.
3
Who is affected by CVE-2024-27783?
CVE-2024-27783 affects all users of FortiAIOps version 2.0.0.
4
What type of attack is associated with CVE-2024-27783?
CVE-2024-27783 is associated with cross-site request forgery (CSRF) attacks.
5
Can CVE-2024-27783 be exploited remotely?
Yes, CVE-2024-27783 can be exploited remotely by unauthenticated attackers.