What is GHSA-fvq4-c84w-q2rx?

GHSA-fvq4-c84w-q2rx is a security advisory published by GitHub Security Advisories with Medium severity. OpenAsset Digital Asset Management (DAM) 12.0.19 and earlier failed to implement access controls...

Which CVE IDs does GHSA-fvq4-c84w-q2rx cover?

GHSA-fvq4-c84w-q2rx covers the following CVE IDs: CVE-2020-28861. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-fvq4-c84w-q2rx?

GHSA-fvq4-c84w-q2rx has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-fvq4-c84w-q2rxMediumCVSS 5.3

OpenAsset Digital Asset Management (DAM) 12.0.19 and earlier failed to implement access controls...

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

July 5, 2026

🔗 CVE IDs covered (1)

CVE-2020-28861 →

📋 Description

OpenAsset Digital Asset Management (DAM) 12.0.19 and earlier failed to implement access controls on /Stream/ProjectsCSV endpoint, allowing unauthenticated attackers to gain access to potentially sensitive project information stored by the application.

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2020-28861
https://www.themissinglink.com.au/security-advisories-cve-2020-28861
http://openasset.com
http://packetstormsecurity.com/files/160457/OpenAsset-Digital-Asset-Management-Insecure-Direct-Object-Reference.html
http://seclists.org/fulldisclosure/2020/Dec/22
https://github.com/advisories/GHSA-fvq4-c84w-q2rx