CVE-2020-28861
Published Dec 14, 2020OpenAsset Digital Asset Management (DAM) 12.0.19 and earlier failed to implement access controls on /Stream/ProjectsCSV endpoint, allowing unauthenticated attackers to gain access…
Vendor/product archive
openasset / digital_asset_management CVEs
Beta · best-effort6 CVEs tagged to openasset / digital_asset_management — 0 Critical, 3 High, 3 Medium, 0 Low, 0 Unrated.
CVE-2020-28860
Published Dec 14, 2020OpenAssetDigital Asset Management (DAM) through 12.0.19 does not correctly sanitize user supplied input, incorporating it into its SQL queries, allowing for authenticated blind SQ…
CVE-2020-28859
Published Dec 14, 2020OpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly sanitize user supplied input in multiple parameters and endpoints, allowing for reflected cross-site sc…
CVE-2020-28858
Published Dec 14, 2020OpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly verify whether a request made to the application was intentionally made by the user, allowing for cross…
CVE-2020-28857
Published Dec 14, 2020OpenAsset Digital Asset Management (DAM) through 12.0.19, does not correctly sanitize user supplied input in multiple parameters and endpoints, allowing for stored cross-site scri…
CVE-2020-28856
Published Dec 14, 2020OpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly determine the HTTP request's originating IP address, allowing attackers to spoof it using X-Forwarded-F…
Showing 1-6 of 6 CVEsPage 1 of 1