CVE-2020-11451

Description

The Upload Visualization plugin in the Microstrategy Web 10.4 admin panel allows an administrator to upload a ZIP archive containing files with arbitrary extensions and data. (This is also exploitable via SSRF). Note: The ability to upload visualization plugins requires administrator privileges.

References

https://community.microstrategy.com/s/article/Web-Services-Security-Vulnerability

http://seclists.org/fulldisclosure/2020/Apr/1

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3