Unrated severityNVD Advisory· Published Dec 10, 2025· Updated Dec 11, 2025
All-Dynamics Digital Signage System 2.0.2 Cross-Site Request Forgery via User Management
CVE-2020-36900
Description
All-Dynamics Digital Signage System 2.0.2 contains a cross-site request forgery vulnerability that allows attackers to create administrative users without proper request validation. Attackers can craft a malicious web page that automatically submits forms to create a new user with global administrative privileges when a logged-in user visits the page.
Affected products
2- Range: = 2.0.2
- All-Dynamics Software GmbH/Digital Signage Systemv5Range: 2.0.2 (Build 2098) ILP32W
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- www.exploit-db.com/exploits/48736mitreexploit
- www.vulncheck.com/advisories/all-dynamics-digital-signage-system-cross-site-request-forgery-via-user-managementmitrethird-party-advisory
- www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5576.phpmitrethird-party-advisory
- www.all-dynamics.demitreproduct
News mentions
0No linked articles in our index yet.