Security Advisory

CVE-2020-11451

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-04-02 15:00:28

Last updated 2024-08-04 11:28:14

Assigner mitre

State PUBLISHED

Description

The Upload Visualization plugin in the Microstrategy Web 10.4 admin panel allows an administrator to upload a ZIP archive containing files with arbitrary extensions and data. (This is also exploitable via SSRF). Note: The ability to upload visualization plugins requires administrator privileges.

← Browse all CVEs View on cve.org ↗