CVE-2020-28858

Mô tả

Tham khảo

• packetstormsecurity.com/files/160458/OpenAsset-Digital-Asset-Management-Cross-Site-Request-Forgery.html · Exploit
• seclists.org/fulldisclosure/2020/Dec/19 · Mailing List
• themissinglink.com.au/security-advisories-cve-2020-28858 · Third Party Advisory

Lỗ hổng khác của digital asset management

• CVE-2020-28861TRUNG BÌNH 5.3OpenAsset Digital Asset Management (DAM) 12.0.19 and earlier failed to implement access controls on /Stream/ProjectsCSV endpoint, allowing u…
• CVE-2020-28860CAO 8.8OpenAssetDigital Asset Management (DAM) through 12.0.19 does not correctly sanitize user supplied input, incorporating it into its SQL queri…
• CVE-2020-28859TRUNG BÌNH 6.1OpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly sanitize user supplied input in multiple parameters and endpoint…
• CVE-2020-28857TRUNG BÌNH 6.1OpenAsset Digital Asset Management (DAM) through 12.0.19, does not correctly sanitize user supplied input in multiple parameters and endpoin…
• CVE-2020-28856CAO 7.5OpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly determine the HTTP request's originating IP address, allowing at…