CVE-2025-47890

An URL Redirection to Untrusted Site vulnerabilities [CWE-601] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions, FortiSASE 25.2.a may allow an unauthenticated attacker to perform an open redirect attack via crafted HTTP requests.

Scoring

Severity

LOW

CVSS base score

2.5

CVSS vector

CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C

EPSS probability

0.25%

CWE

CWE-601

Published

2025-10-14

Last modified

2026-08-11

Affected products

• Fortinet FortiSASE
• Fortinet FortiProxy
• Fortinet FortiProxy
• Fortinet FortiProxy
• Fortinet FortiProxy
• Fortinet FortiOS
• Fortinet FortiOS
• Fortinet FortiOS

Weakness type

• CWE-601

Related vulnerabilities

• CVE-2026-6795 — Open Redirect in DivvyDrive Information Technologies' DivvyDrive
• CVE-2026-54588 — Poweradmin has Host Header Injection in OIDC redirect_uri, SAML ACS/SLO URL, and Logout Redirect Construction.
• CVE-2026-53662 — immich: One-click account takeover via XSS in login page continue redirect
• CVE-2026-43941 — Unvalidated shell.openExternal in electerm allows arbitrary protocol execution via terminal link click
• CVE-2026-61451 — Grav before 1.0.4 Password Reset Token Poisoning via admin_base_url
• CVE-2026-54618 — Obsidian Web MCP: Unauthenticated vault access: /oauth/authorize auto-approves without authenticating the user
• CVE-2026-8323 — Open Redirect in Armiya Information Technologies' Access Control System
• CVE-2026-71428 — unstructured: Server-Side Request Forgery in the URL-based partitioning

Markdown version · Browse all CVEs