Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A spoofing vulnerability exists in Microsoft Power BI Report Server in the way it validates the content-type of uploaded attachments, aka 'Microsoft Power BI Report Server Spoofing Vulnerability'.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft Power BI Report Server 输入验证错误漏洞
Vulnerability Description
Microsoft Power BI Report Server是美国微软（Microsoft）公司的一个用于商业分析报告的管理、分享的服务端应用程序。 Microsoft Power BI Report Server中验证上传附件内容类型的方法存在欺骗漏洞。攻击者可通过上传特制的payload并将其发送给用户利用该漏洞执行操作，并在用户的安全上下文中运行脚本。以下产品及版本受到影响： Power BI Report Server版本。
CVSS Information
N/A
Vulnerability Type
N/A