CVE-2020-15151

Name of the Vulnerable Software and Affected Versions OpenMage versions prior to 19.4.6 OpenMage versions prior to 20.0.2

Description This issue allows attackers to circumvent the fromkey protection in the Admin Interface, increasing the attack surface for Cross Site Request Forgery attacks.

Recommendations For versions prior to 19.4.6, update to version 19.4.6 or later. For versions prior to 20.0.2, update to version 20.0.2 or later. As a temporary workaround, consider restricting access to the Admin Interface to minimize the risk of exploitation.