Use of Less Trusted Source Vulnerability in Fortinet FortiPortal

CVE-2024-23105

What is CVE-2024-23105?

A vulnerability exists in Fortinet FortiPortal versions 7.0.0 through 7.0.6 and 7.2.0 through 7.2.1, where an unauthenticated attacker can exploit a design flaw revolving around the use of less trusted sources. This flaw enables attackers to bypass IP protection mechanisms by sending specially crafted HTTP or HTTPS packets. Such a vulnerability poses significant risks, allowing unauthorized actions that could compromise the security of affected systems.

References