CVE-2020-22984 in Web SDK

Riassunto

di MITRE • 13/05/2022

Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attackers to execute arbitrary code via key parameter to the getGoogleExtraConfig task.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Prenotare: 13/08/2020
• Divulgazione: 13/05/2022
• Moderazione: accettato
• Voce: VDB-199722
• CPE: pronto
• CWE: CWE-79 (confermato)
• CVSS: 6.1 (NVD)
• EPSS: 0.01555
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-22984
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-22984
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-22984/