CVE-2023-47543: Fortinet Fortiportal

High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days.

An authorization bypass through user-controlled key vulnerability [CWE-639] in Fortinet FortiPortal version 7.0.0 through 7.0.3 allows an authenticated attacker to interact with ressources of other organizations via HTTP or HTTPS requests.

Affected products

• Fortinet Fortiportal: from 7.0.0, before 7.0.4 (fixed in 7.0.4)

Published 2024-11-12. Last modified 2026-06-17.