medium6.1
CVE-2020-28857
OpenAsset Digital Asset Management (DAM) through 12.0.19, does not correctly sanitize user supplied input in multiple parameters and endpoints, allowing for st…
Impact
OpenAsset Digital Asset Management (DAM) through 12.0.19, does not correctly sanitize user supplied input in multiple parameters and endpoints, allowing for stored cross-site scripting attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openasset | Digital Asset Management | through 12.0.19 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/160455/OpenAsset-Digital-Asset-Management-Cross-Site-Scripting.html
- http://seclists.org/fulldisclosure/2020/Dec/18
- https://www.themissinglink.com.au/security-advisories-cve-2020-28857
- http://packetstormsecurity.com/files/160455/OpenAsset-Digital-Asset-Management-Cross-Site-Scripting.html
- http://seclists.org/fulldisclosure/2020/Dec/18
- https://www.themissinglink.com.au/security-advisories-cve-2020-28857