# All-Dynamics Digital Signage System CSRF flaw lets attackers create administrative users

- Date: 2025-12-10
- Location: Global
- Type: Vulnerability
- Sector: Vendor
- CVE: CVE-2020-36900

NVD published a cross-site request forgery flaw in All-Dynamics Digital Signage System 2.0.2. It lets attackers create administrative users without proper request validation.

## Sources

- [CVE-2020-36900](https://nvd.nist.gov/vuln/detail/CVE-2020-36900) (NIST NVD)
- [https://www.all-dynamics.de](https://www.all-dynamics.de)
- [https://www.exploit-db.com/exploits/48736](https://www.exploit-db.com/exploits/48736)

Page: https://signagelist.org/incidents/2025-12-all-dynamics-digital-signage-system-csrf-flaw/