Description
An issue was discovered in Bloomreach Experience Manager (brXM) 4.1.0 through 14.2.2. It allows CSRF if the attacker uses GET where POST was intended.
Unscored
CVE-2020-14989
EUVD-2020-7119GHSA-pr32-qm3r-fmqr
An issue was discovered in Bloomreach Experience Manager (brXM) 4.1.0 through 14.2.2. It allows CSRF if the attacker uses GET where POST wa…
Published Mar 11, 2021 · Updated Aug 4, 2024 · Assigned by mitre