CVE-2020-11452

概要

参考情報

• packetstormsecurity.com/files/157068/MicroStrategy-Intelligence-Server-And-Web-10.4-XSS-Disclosure-SSRF-Code-Execution.html · Exploit
• seclists.org/fulldisclosure/2020/Apr/1
• community.microstrategy.com/s/article/Web-Services-Security-Vulnerability · Patch
• redtimmy.com/web-application-hacking/another-ssrf-another-rce-the-microstrategy-case · Exploit

microstrategy web のその他の脆弱性

• CVE-2020-22983高 8.1A Server-Side Request Forgery (SSRF) vulnerability exists in MicroStrategy Web SDK 11.1 and earlier, allows remote unauthenticated attackers…
• CVE-2020-11453中 5.3Microstrategy Web 10.4 is vulnerable to Server-Side Request Forgery in the Test Web Service functionality exposed through the path /MicroStr…
• CVE-2020-11454中 5.4Microstrategy Web 10.4 is vulnerable to Stored XSS in the HTML Container and Insert Text features in the window, allowing for the creation o…
• CVE-2020-11451高 7.2The Upload Visualization plugin in the Microstrategy Web 10.4 admin panel allows an administrator to upload a ZIP archive containing files w…
• CVE-2020-11450高 7.5Microstrategy Web 10.4 exposes the JVM configuration, CPU architecture, installation folder, and other information through the URL /MicroStr…