CVEvulnerability

CVE-2017-7926

8.8 HIGH Published 2017-08-25 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-08-25
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-352

Description

A Cross-Site Request Forgery issue was discovered in OSIsoft PI Web API versions prior to 2017 (1.9.0). The vulnerability allows cross-site request forgery (CSRF) attacks to occur when an otherwise-unauthorized cross-site request is sent from a browser the server has previously authenticated.

Affected configurations

• osisoft pi web api 1.8

Related

Weakness · CWE (1)

  • CWE-352 Cross-Site Request Forgery weakness

References