Description
OpenMage LTS before versions 19.4.6 and 20.0.2 allows attackers to circumvent the `fromkey protection` in the Admin Interface and increases the attack surface for Cross Site Request Forgery attacks. This issue is related to Adobe's CVE-2020-9690. It is patched in versions 19.4.6 and 20.0.2.
Remediation
References
Related Vulnerabilities
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-4569)
Atlassian Jira CVE-2020-14167 Vulnerability (CVE-2020-14167)
WordPress Plugin Codestyling Localization 'name' Parameter Cross-Site Scripting (1.99.19)
SharePoint CVE-2023-21744 Vulnerability (CVE-2023-21744)
Joomla Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-1599)