CVE-2025-62675
LowCVSS 3.4Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
An HTTP Response Splitting vulnerability in FortiOS and FortiProxy allows an attacker with a valid web filter override token to inject arbitrary HTTP headers by tricking a user into clicking a crafted link.
Risk Assessment
An attacker can manipulate HTTP responses, potentially leading to session hijacking, redirection to malicious sites, or bypassing security policies.
Recommendation
Immediately update FortiOS and FortiProxy to patched versions and restrict access to web filter override tokens.
Original NVD description (English source)
An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.4, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions may allow an attacker in possession of a valid web filter override token to inject arbitrary headers via tricking a user into clicking on a crafted link.