60
CVE-2020-11451
- CVSS 3.1
- 7.2 high
- EPSS
- 3%p86
- Published
- ·
- Modified
Description · NVD
The Upload Visualization plugin in the Microstrategy Web 10.4 admin panel allows an administrator to upload a ZIP archive containing files with arbitrary extensions and data. (This is also exploitable via SSRF). Note: The ability to upload visualization plugins requires administrator privileges.
- Vendors
- microstrategy
- Products
- microstrategy web
- Weakness
- CWE-434
- Vector
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H