Description
A Cross-Site Request Forgery issue was discovered in OSIsoft PI Web API versions prior to 2017 (1.9.0). The vulnerability allows cross-site request forgery (CSRF) attacks to occur when an otherwise-unauthorized cross-site request is sent from a browser the server has previously authenticated.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | OSIsoft PI Web API 2017 | OSIsoft PI Web API 2017 | — |
Advisories 1
- ICSA-17-164-03 OSIsoft PI Web API 2017 CISA ICS & IT advisories · Jun 13, 2017