CVE-2024-23664

6.1 mediumEPSS 0.3%

Medium (6.1) in fortinet fortiauthenticator. EPSS 0.3% chance of exploitation in the next 30 days.

A URL redirection to untrusted site ('open redirect') in Fortinet FortiAuthenticator version 6.6.0, version 6.5.3 and below, version 6.4.9 and below may allow an attacker to to redirect users to an arbitrary website via a crafted URL.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 28% of CVEs (scores of 2026-10-31)
CWE: CWE-601
Published: 2024-06-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortiauthenticator

References

https://fortiguard.fortinet.com/psirt/FG-IR-23-465
https://fortiguard.fortinet.com/psirt/FG-IR-23-465

Check your stack JSON