Server side request forgery (ssrf)

2020-11-2417:15:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.8%

JSON

A Server-Side Request Forgery (SSRF) affecting the PDF generation in MicroStrategy 10.4, 2019 before Update 6, and 2020 before Update 2 allows authenticated users to access the content of internal network resources or leak files from the local system via HTML containers embedded in a dossier/dashboard document. NOTE: 10.4., no fix will be released as version will reach end-of-life on 31/12/2020.

CPENameOperatorVersion
microstrategyeq10.4
microstrategyeq2019 update1
microstrategyeq2019 update2
microstrategyeq2019 update3
microstrategyeq2019 update4
microstrategyeq2019 update5
microstrategyeq2020 update1

Name	Operator	Version
microstrategy	eq	10.4
microstrategy	eq	2019 update1
microstrategy	eq	2019 update2
microstrategy	eq	2019 update3
microstrategy	eq	2019 update4
microstrategy	eq	2019 update5
microstrategy	eq	2020 update1