CVE-2020-13416

Published: 2020-05-22T21:15Z

Last Modified: 2024-11-21T05:01Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

An issue was discovered in Aviatrix Controller before 5.4.1066. A Controller Web Interface session token parameter is not required on an API call, which opens the application up to a Cross Site Request Forgery (CSRF) vulnerability for password resets. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt