CVE-2023-25603 (published 2023-11-14T18:08:16.641Z)
A permissive cross-domain policy with untrusted domains vulnerability in Fortinet FortiADC 7.1.0 - 7.1.1, FortiDDoS-F 6.3.0 - 6.3.4 and 6.4.0 - 6.4.1 allow an unauthorized attacker to carry out privileged actions and retrieve sensitive information via crafted web requests.
Affected products: Vendor: Fortinet
Product: FortiDDoS-F
Versions: 6.4.0, 6.3.0