CVE Daily

CVE-2023-48786

A server-side request forgery vulnerability [CWE-918] in Fortinet FortiClientEMS...

Medium CVSS 4.3

Overview

A server-side request forgery vulnerability [CWE-918] in Fortinet FortiClientEMS version 7.4.0 through 7.4.2 and before 7.2.6 may allow an authenticated attacker to perform internal requests via crafted HTTP or HTTPS requests.

CWE: CWE-918 Published: 2025-06-10T17:18:40.720
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 4.3 (MEDIUM)
  • Detected tags: ssrf (tag impact: MODERATE)

Recommended actions:

  • Deny access to internal/metadata addresses; use outbound allowlists.

Recommended tools

Tags