CVE-2020-28857

OpenAsset Digital Asset Management DAM through 12.0.19, does not correctly sanitize user supplied input in multiple parameters and endpoints, allowing for stored cross-site scripting attacks...

CVE-2020-28857

creationtimestamp| type| source ---|---|--- 2020-12-14 22:39:21+00:00| seen| https://t.me/cibsecurity/20765...

CVE-2020-28857

OpenAsset Digital Asset Management DAM through 12.0.19, does not correctly sanitize user supplied input in multiple parameters and endpoints, allowing for stored cross-site scripting attacks...

CVE-2020-28857

OpenAsset Digital Asset Management (DAM) prior to patches 12.0.23 (Cloud) / 11.4.10 (On‑prem) is vulnerable to stored cross‑site scripting due to incomplete sanitization of user input across multiple parameters and endpoints (e.g., system preferences, project code, user/password regex fields, and...

OpenAsset Digital Asset Management Cross Site Scripting

Title: Stored cross-site scripting XSS Product: OpenAsset Digital Asset Management by OpenAsset Vendor Homepage: https://www.openasset.com/ Vulnerable Version: 12.0.19 Cloud 11.2.1 On-premise Fixed Version: 12.0.23 Cloud 11.4.10 On-premise CVE Number: CVE-2020-28857 Author: Jack Misiura from The...