FortiAnalyzer Cross Site Request Forgery Vulnerability
Multiple CSRF vulnerabilities exist in the FortiAnalyzer web administration console due to an error in CSRF token validation. This could allow remote attackers to perform administrative actions under specific conditions.
FortiAnalyzer 4.x prior to version 4.3.7,FortiAnalyzer 5.x prior to version 5.0.5.
Upgrade to FortiAnalyzer 4.3.7 or FortiAnalyzer 5.0.5.