CVE-2017-7926CWE-352

A Cross-Site Request Forgery issue was discovered in OSIsoft PI Web API versions prior to 2017 (1.9.0)

published August 25, 2017

CVSS
—
EPSS
1%
Percentile
57.0
In the wild
Unconfirmed
What it is

A Cross-Site Request Forgery issue was discovered in OSIsoft PI Web API versions prior to 2017 (1.9.0). The vulnerability allows cross-site request forgery (CSRF) attacks to occur when an otherwise-unauthorized cross-site request is sent from a browser the server has previously authenticated.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00826 · 57.0th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2017-08-25T19:00Z
EPSS history
Timeline
  • 25 AUG 19:00Z
    A Cross-Site Request Forgery issue was discovered in OSIsoft PI Web API versions prior to 2017 (1.9.0)
    cvelistv5