CVE-2020-11452

Microstrategy Web 10.4 includes functionality to allow users to import files or data from external resources such as URLs or databases

published April 2, 2020

CVSS
—
EPSS
1%
Percentile
68.3
In the wild
Unconfirmed
What it is

Microstrategy Web 10.4 includes functionality to allow users to import files or data from external resources such as URLs or databases. By providing an external URL under attacker control, it's possible to send requests to external resources (aka SSRF) or leak files from the local system using the file:// stream wrapper.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01215 · 68.3th percentile
Published
2020-04-02T15:02Z
EPSS history
Timeline
  • 02 APR 15:02Z
    Microstrategy Web 10.4 includes functionality to allow users to import files or data from external resources such as URLs or databases
    cvelistv5