CVE-2020-22983

HIGH 8.1CVE-2020-22983 · Published 13/05/2022 · updated 09/07/2026

In short

CVE-2020-22983 is a HIGH (CVSS 8.1) vulnerability affecting microstrategy web (microstrategy).
Chance of exploitation in the next 30 days (EPSS): 2.5%, higher than 84.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
microstrategy web microstrategy	`≤ 11.1`	No fix yet

Description

A Server-Side Request Forgery (SSRF) vulnerability exists in MicroStrategy Web SDK 11.1 and earlier, allows remote unauthenticated attackers to conduct a server-side request forgery (SSRF) attack via the srcURL parameter to the shortURL task.

References

yourcompany.com/MicroStrategy/servlet/taskProc · Broken Link
medium.com/@win3zz/how-i-made-31500-by-submitting-a-bug-to-facebook-d31bb046e204
tinyurl.com · Third Party Advisory
microstrategy.com/us/report-a-security-vulnerability · Vendor Advisory
medium.com/%40win3zz/how-i-made-31500-by-submitting-a-bug-to-facebook-d31bb046e204

More vulnerabilities in microstrategy web

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

microstrategy web

microstrategy

≤ 11.1

No fix yet

More vulnerabilities in microstrategy web

See all →