CVE-2013-6826
cgi-bin/module//sysmanager/admin/SYSAdminUserDialog in Fortinet FortiAnalyzer before 5.0.5 does not properly validate the csrf_token parameter, which allows remote attackers to perform cross-site request forgery (CSRF) attacks.
- EPSS
- 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
- CWE
- CWE-352
- Published
- Modified
- Record from
- the NVD, synced
Affected
- fortinet:fortianalyzer-1000d
- fortinet:fortianalyzer-2000b
- fortinet:fortianalyzer-200d
- fortinet:fortianalyzer-3000d
- fortinet:fortianalyzer-300d
- fortinet:fortianalyzer-4000b
- fortinet:fortianalyzer_firmware