CVE-2020-22983

Description

References

• yourcompany.com/MicroStrategy/servlet/taskProc · Broken Link
• medium.com/@win3zz/how-i-made-31500-by-submitting-a-bug-to-facebook-d31bb046e204
• tinyurl.com · Third Party Advisory
• microstrategy.com/us/report-a-security-vulnerability · Vendor Advisory
• medium.com/%40win3zz/how-i-made-31500-by-submitting-a-bug-to-facebook-d31bb046e204

microstrategy web의 다른 취약점

• CVE-2020-11453보통 5.3Microstrategy Web 10.4 is vulnerable to Server-Side Request Forgery in the Test Web Service functionality exposed through the path /MicroStr…
• CVE-2020-11452보통 4.3Microstrategy Web 10.4 includes functionality to allow users to import files or data from external resources such as URLs or databases. By p…
• CVE-2020-11454보통 5.4Microstrategy Web 10.4 is vulnerable to Stored XSS in the HTML Container and Insert Text features in the window, allowing for the creation o…
• CVE-2020-11451높음 7.2The Upload Visualization plugin in the Microstrategy Web 10.4 admin panel allows an administrator to upload a ZIP archive containing files w…
• CVE-2020-11450높음 7.5Microstrategy Web 10.4 exposes the JVM configuration, CPU architecture, installation folder, and other information through the URL /MicroStr…