CVE-2023-48789 | Fortinet FortiPortal up to 6.0.14 HTTP Request client-side enforcement of server-side security (FG-IR-23-406)

A vulnerability, which was classified as problematic, was found in Fortinet FortiPortal up to 6.0.14. Affected is an unknown function of the component HTTP Request Handler. The manipulation leads to client-side enforcement of server-side security.

This vulnerability is traded as CVE-2023-48789. It is possible to launch the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.