CVE-2020-19586 PoC — Yellowfin 跨站脚本漏洞

Source

https://github.com/Deepak983/CVE-2020-19586

Associated Vulnerability

Title:Yellowfin 跨站脚本漏洞 (CVE-2020-19586)
Description:Yellowfin是澳大利亚Yellowfin公司的一套创新的数据和分析产品。 Yellowfin Business Intelligence 7.3版本存在安全漏洞，该漏洞源于访问控制不正确。攻击者利用该漏洞可通过MIAdminStyles.i4 Admin UI升级权限。

Description

Incorrect Access Control issue in Yellowfin Business Intelligence 7.3 allows remote attackers to escalate privilege via MIAdminStyles.i4 Admin UI

File Snapshot


 [4.0K]  /data/pocs/4c3ac14eb2306326df8f0b0a61492e4c21b5feb0
└── [4.1M]  Stored XSS in MIAdminStyles.i4 through privileges escalation.pdf

0 directories, 1 file

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!