A Deserialization of Untrusted Data issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Unauthenticated users may modify deserialized data to send custom requests that crash the server.
[
{
"product": "OSIsoft PI Data Archive",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "OSIsoft PI Data Archive"
}
]
}
]