CVE-2024-48887

The repository claims to exploit an unverified password change vulnerability in Fortinet FortiSwitch GUI but provides no actual exploit code. Instead, it directs users to download the exploit from an external URL (tinyurl.com), which is a common tactic for distributing malware or scams.

The repository contains a functional JavaScript PoC that demonstrates an authentication bypass vulnerability in FortiSwitch devices, allowing unauthorized password changes via a crafted POST request to the /change_pass endpoint.