medium6.5
CVE-2020-14989
An issue was discovered in Bloomreach Experience Manager (brXM) 4.1.0 through 14.2.2.
Impact
An issue was discovered in Bloomreach Experience Manager (brXM) 4.1.0 through 14.2.2. It allows CSRF if the attacker uses GET where POST was intended.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bloomreach | Experience Manager | from 14.1.0 through 14.2.2 |