Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Upload Visualization plugin in the Microstrategy Web 10.4 admin panel allows an administrator to upload a ZIP archive containing files with arbitrary extensions and data. (This is also exploitable via SSRF). Note: The ability to upload visualization plugins requires administrator privileges.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microstrategy Web 代码问题漏洞
Vulnerability Description
Microstrategy Web是美国Microstrategy公司的一套企业数据分析平台。该平台具有数据发现、数据可视化和报表生成等功能。 Microstrategy Web 10.4版本中的管理员面板的Upload Visualization插件存在代码问题漏洞。攻击者可利用该漏洞上传带有任意扩展和数据的ZIP文件。
CVSS Information
N/A
Vulnerability Type
N/A