CVE-2020-28861: Improper Neutralization of Formula Elements in a CSV File

OpenAsset Digital Asset Management DAM 12.0.19 and earlier failed to implement access controls on /Stream/ProjectsCSV endpoint, allowing unauthenticated attackers to gain access to potentially sensitive project information stored by the application...

PT-2020-17048

Name of the Vulnerable Software and Affected Versions OpenAsset Digital Asset Management DAM versions 12.0.19 and earlier Description The issue is related to a lack of access controls on the "Stream/ProjectsCSV" endpoint, allowing unauthenticated attackers to access potentially sensitive project...