CVE-2020-28857 | BDVDB-2026-145939 Detail

Description#

OpenAsset Digital Asset Management (DAM) through 12.0.19, does not correctly sanitize user supplied input in multiple parameters and endpoints, allowing for stored cross-site scripting attacks.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://seclists.org/fulldisclosure/2020/Dec/18
http://packetstormsecurity.com/files/160455/OpenAsset-Digital-Asset-Management-Cross-Site-Scripting.html
https://www.themissinglink.com.au/security-advisories-cve-2020-28857

Exploit#

No public exploit known

History#

Version 12020-12-14Record published in the CVE List.
Version 22026-07-09Most recent update recorded in the CVE List.