CVE-2020-28858

OpenAsset Digital Asset Management (DAM) is affected by CSRF (CVE-2020-28858). vulnerable: Cloud 12.0.19 and On‑premise 11.2.1; fixed: Cloud 12.0.26 and On‑premise 11.4.10. Root cause: the app did not verify that user actions were intentionally initiated by the user, enabling CSRF across user fun...