Skip to content
OpenAdvisories
Unscored CVE-2020-28857 EUVD-2020-21249GHSA-gwg7-mp6r-mj4h

OpenAsset Digital Asset Management (DAM) through 12.0.19, does not correctly sanitize user supplied input in multiple parameters and endpoi…

Published Dec 14, 2020 · Updated Jul 9, 2026 · Assigned by mitre

Description

OpenAsset Digital Asset Management (DAM) through 12.0.19, does not correctly sanitize user supplied input in multiple parameters and endpoints, allowing for stored cross-site scripting attacks.

References