CVE-2019-12453

CVE-2019-12453 CVE-2019-12453 MicroStrategy Web 10.1パッチ10より前における保存型XSS 作成者: undefinedmode https://github.com/undefinedmode/CVE-2019-12453 バージョン10.1パッチ10より前のMicroStrategy Webでは、入力検証が欠如しているため、FLTBパラメータで保存型XSSが発生する可能性があります。 FLTBパラメータはアプリケーション全体で使用されています。...

EUVD-2019-4061

Malware in sbrugna...

MicroStrategy Web Cross-Site Scripting Vulnerability (CNVD-2019-23751)

Microstrategy Web is a set of U.S. Microstrategy's enterprise data analysis platform. The platform features data discovery, data visualization and report generation. A cross-site scripting vulnerability exists in the 'FLTB' parameter in MicroStrategy Web versions prior to 10.1 patch 10. The...

CVE-2019-12453

In MicroStrategy Web before 10.1 patch 10, stored XSS is possible in the FLTB parameter due to missing input validation...

CVE-2019-12453

In MicroStrategy Web before 10.1 patch 10, stored XSS is possible in the FLTB parameter due to missing input validation...

CVE-2019-12453: Improper Neutralization of Input During Web Page Generation

In MicroStrategy Web before 10.1 patch 10, stored XSS is possible in the FLTB parameter due to missing input validation...