CacheGuard OS 5.7.7 - Cross-Site Request Forgery in Password Admin Interface
Cross-site request forgery (CSRF) vulnerability in gui/password-wadmin.apl in CacheGuard OS 5.7.7 allows remote attackers to hijack the authentication of arbitrary users.
FortiAnalyzer < 5.0.5 - Cross-Site Request Forgery via csrf_token Parameter
cgi-bin/module//sysmanager/admin/SYSAdminUserDialog in Fortinet FortiAnalyzer before 5.0.5 does not properly validate the csrf_token parameter, which allows remote attackers to perform cross-site request forgery (CSRF) attacks.