CVE-2020-28857

2020-12-1418:53:18

mitre

www.cve.org

openasset

dam

stored cross-site scripting

EPSS

0.004

Percentile

73.0%

JSON

OpenAsset Digital Asset Management (DAM) through 12.0.19, does not correctly sanitize user supplied input in multiple parameters and endpoints, allowing for stored cross-site scripting attacks.

References

openasset.com

packetstormsecurity.com/files/160455/OpenAsset-Digital-Asset-Management-Cross-Site-Scripting.html

seclists.org/fulldisclosure/2020/Dec/18

www.themissinglink.com.au/security-advisories-cve-2020-28857

EPSS

0.004

Percentile

73.0%

JSON

Related for CVELIST:CVE-2020-28857