| Package | Affected versions | Patched versions |
|---|---|---|
| controller | < 5.4.1066 | 5.4.1066 |
An issue was discovered in Aviatrix Controller before 5.4.1066. A Controller Web Interface session token parameter is not required on an API call, which opens the application up to a Cross Site Request Forgery (CSRF) vulnerability for password resets.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free