← Back

CVE-2025-47890

nvd nist
Published: Oct 14, 2025Modified: Jan 14, 2026

JSON object

Loading...
6.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Exploitability: 2.8 / Impact: 2.7
Source: NVD

Description

An URL Redirection to Untrusted Site vulnerabilities [CWE-601] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions, FortiSASE 25.2.a may allow an unauthenticated attacker to perform an open redirect attack via crafted HTTP requests.

Affected (5)

Fortinet
3 products
Fortios
Fortiproxy
Fortisase
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Fortinet
Fortios
From 6.4.0 to 7.4.9
Fortios
From 7.6.0 to 7.6.4
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Fortiproxy
From 7.0.0 to 7.6.4
Configuration C
2 vulnerable
Vulnerable SoftwareAffected Versions
Fortinet
Fortisase
Version 25.3.40
Fortisase
Version 25.3.40

Related CWEs

CWE-601
URL Redirection to Untrusted Site ('Open Redirect')
A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks.

References (1)

Source: psirt@fortinet.com
Vendor Advisory

Timeline

No history available yet.