Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2023-28718

CVE-2023-28718

Description

Osprey Pump Controller version 1.01 allows users to perform certain actions via HTTP requests without performing any checks to verify the requests. This may allow an attacker to perform certain actions with administrative privileges if a logged-in user visits a malicious website.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ProPump and Controls, Inc. Osprey Pump Controller

  • 1.01affected

References