[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fe4Jvas1hZiOBi3hF_3s-AWaSca7xCsc0OyYDbbjkjH4":3,"g5a-risk:CVE-2023-48790":118},{"success":4,"data":5,"meta":115},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":37,"epssPercentile":28,"epssTimeSeries":38,"severity":39,"affectedProducts":40,"affectedProductsCount":49,"references":50,"referencesCount":56,"weaknesses":57,"weaknessesCount":56,"isActivelyExploited":66,"cisaInfo":28,"otxData":28,"relatedBlogPosts":67,"seoMetadata":68,"configurations":93,"relatedVendorCves":113,"notableEvents":114},"CVE-2023-48790","What is CVE-2023-48790?","A cross site request forgery vulnerability [CWE-352] in Fortinet FortiNDR version 7.4.0, 7.2.0 through 7.2.1 and 7.1.0 through 7.1.1 and before 7.0.5 may allow a remote unauthenticated attacker to execute unauthorized actions via crafted HTTP GET requests.","A cross site request forgery vulnerability [CWE-352] in Fortinet FortiNDR version 7.4.0, 7.2.0 through 7.2.1 and 7.1.0 through 7.1.1 and before 7.0.5 may all...","2025-03-11T15:15:40.227","2025-07-22T21:22:45.563",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":28,"CVSSMetricV2":28,"CVSSMetricV40":28},[16,31],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":29,"ImpactScore":30},"psirt@fortinet.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":27,"BaseSeverity":23,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":23,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.1","CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H","NETWORK","HIGH","NONE","REQUIRED","UNCHANGED",7.5,null,1.6,5.9,{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":36,"ImpactScore":30},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":35,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":23,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":23,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"LOW",2.8,0.0024,[37,37,37,37,37,37,37],"High",[41,46],{"vendor":42,"product":43,"version":44,"criteria":45,"vulnerable":4},"fortinet","fortindr","*","cpe:2.3:a:fortinet:fortindr:*:*:*:*:*:*:*:*",{"vendor":42,"product":43,"version":47,"criteria":48,"vulnerable":4},"7.4.0","cpe:2.3:a:fortinet:fortindr:7.4.0:*:*:*:*:*:*:*",2,[51],{"url":52,"source":53,"tags":54},"https:\u002F\u002Ffortiguard.fortinet.com\u002Fpsirt\u002FFG-IR-23-353","Fortinet",[55],"Vendor Advisory",1,[58],{"id":59,"name":60,"description":61,"extendedDescription":62,"status":63,"abstraction":64,"structure":65},"CWE-352","Cross-Site Request Forgery (CSRF)","The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.","When a web server is designed to receive a request from a client without any mechanism for verifying that it was intentionally sent, then it might be possible for an attacker to trick a client into making an unintentional request to the web server which will be treated as an authentic request. This can be done via a URL, image load, XMLHttpRequest, etc. and can result in exposure of data or unintended code execution.","Stable","Compound","Composite",false,[],{"title":69,"metaDescription":70,"keywords":71,"canonicalUrl":72,"structuredData":73},"What is CVE-2023-48790? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-48790, a high severity cyber security vulnerability from 2025. A cross site request forgery vulnerability [CWE-352] in For...","CVE-2023-48790, CVE-2023-48790 vulnerability, CVE-2023-48790 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, fortinet security, fortindr vulnerability","\u002Fwhat-is\u002Fcve-2023-48790",{"@context":74,"@type":75,"headline":69,"description":70,"datePublished":10,"dateModified":11,"author":76,"publisher":80,"about":84,"mainEntityOfPage":88,"articleSection":91,"keywords":92},"https:\u002F\u002Fschema.org","TechArticle",{"@type":77,"name":78,"url":79},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":77,"name":78,"url":79,"logo":81},{"@type":82,"url":83},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":85,"name":6,"description":86,"additionalType":87},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":89,"@id":90},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-48790","Cybersecurity","CVE-2023-48790, CVE-2023-48790 vulnerability, CVE-2023-48790 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[94],{"Operator":28,"Negate":28,"Nodes":95},[96],{"Operator":97,"Negate":28,"CPEMatch":98},"OR",[99,103,107,111],{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":100,"VersionStartExcluding":28,"VersionStartIncluding":101,"VersionEndExcluding":102,"VersionEndIncluding":28},"C41E06C7-CAA4-41C3-98CF-E8A277809E15","1.5.0","7.0.6",{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":104,"VersionStartExcluding":28,"VersionStartIncluding":105,"VersionEndExcluding":106,"VersionEndIncluding":28},"E01D5B72-84FE-491A-9CE4-103B3DD3A0BD","7.1.0","7.1.2",{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":108,"VersionStartExcluding":28,"VersionStartIncluding":109,"VersionEndExcluding":28,"VersionEndIncluding":110},"960E2185-DD32-44A1-BF36-9B9C02ABE650","7.2.0","7.2.2",{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":112,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"086FE30C-813B-4990-BBDA-010CB3EBC6EA",[],[],{"lastModified":11,"cacheTime":116,"version":117},1792368461528,"2.0",{"score":119,"band":120,"action":121,"scoredAt":122},48,"Medium","Plan remediation","2026-10-16T07:06:19.659312+00:00"]