Description (CNA)
A Cross-Site Request Forgery issue was discovered in OSIsoft PI Web API versions prior to 2017 (1.9.0). The vulnerability allows cross-site request forgery (CSRF) attacks to occur when an otherwise-unauthorized cross-site request is sent from a browser the server has previously authenticated.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / OSIsoft PI Web API 2017 | affected OSIsoft PI Web API 2017 |
CWE
CWE-352
References
ADP enrichment
No English description supplied.