CVE-2020-28857

MediumCVSS 6.1

Published: 14/12/2020(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.48%

71th percentile - higher than 71% of all known CVEs

Summary

OpenAsset Digital Asset Management (DAM) through version 12.0.19 fails to properly sanitize user-supplied input in multiple parameters and endpoints, allowing stored cross-site scripting (XSS) attacks.

Risk Assessment

An attacker can inject malicious scripts that execute in other users' browsers, potentially leading to session theft, data leakage, or account takeover.

Recommendation

Immediately update OpenAsset DAM to the latest available version and implement server-side input validation and sanitization.

Original NVD description (English source)

OpenAsset Digital Asset Management (DAM) through 12.0.19, does not correctly sanitize user supplied input in multiple parameters and endpoints, allowing for stored cross-site scripting attacks.