CVE-2020-22987

Cross-Site Scripting XSS vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attackers to execute arbitrary code via the fileToUpload parameter to the uploadFile task...

CVE-2020-22987

creationtimestamp| type| source ---|---|--- 2022-05-13 00:42:20+00:00| seen| https://t.me/cibsecurity/42558...

CVE-2020-22987

CVE-2020-22987 : A cross-site scripting (XSS) vulnerability exists in MicroStrategy Web SDK 10.11 and earlier. The issue stems from lack of filtering/escaping of the fileToUpload parameter used by the uploadFile task, enabling remote unauthenticated attackers to execute arbitrary code via that pa...