EUVD-2020-5666

Malware in sbrugna...

CVE-2020-13412

An issue was discovered in Aviatrix Controller before 5.4.1204. An API call on the web interface lacked a session token check to control access, leading to CSRF...

Cross site request forgery (csrf)

An issue was discovered in Aviatrix Controller before 5.4.1204. An API call on the web interface lacked a session token check to control access, leading to CSRF...

CVE-2020-13412

The CVE-2020-13412 vulnerability affects Aviatrix Controller prior to 5.4.1204. A web API call did not perform a session token check, enabling Cross-Site Request Forgery (CSRF). The issue originates from inadequate request validation in the web interface, allowing unauthorized actions via forged ...

CVE-2020-13412

An issue was discovered in Aviatrix Controller before 5.4.1204. An API call on the web interface lacked a session token check to control access, leading to CSRF...

PT-2020-13524

Name of the Vulnerable Software and Affected Versions Aviatrix Controller versions prior to 5.4.1204 Description An issue was discovered in the Aviatrix Controller where an API call on the web interface lacked a session token check to control access, leading to Cross-Site Request Forgery CSRF...

CVE-2020-13412: Cross-Site Request Forgery (CSRF)

An issue was discovered in Aviatrix Controller before 5.4.1204. An API call on the web interface lacked a session token check to control access, leading to CSRF...