PSIRT[FortiSiem] CSRF vulnerability in FortiSiem
Summary
A Cross-Site Request Forgery (CSRF) vulnerability in the user interface of FortiSIEM could allow a remote, unauthenticated attacker to perform arbitrary actions using an authenticated user's session by persuading the victim to follow a malicious link.
Affected Products
FortiSIEM version 5.2.5 and below
Solutions
Please upgrade to FortiSIEM version 5.2.6 and above.
Acknowledgement
Fortinet is pleased to thank the researcher Ganoush for bringing this issue to our attention under responsible disclosure.