CVE-2019-12453 PoC — Microstrategy Web 跨站脚本漏洞

Source

https://github.com/undefinedmode/CVE-2019-12453

Associated Vulnerability

Title: Microstrategy Web 跨站脚本漏洞 (CVE-2019-12453)
Description:In MicroStrategy Web before 10.1 patch 10, stored XSS is possible in the FLTB parameter due to missing input validation.

Description

Authenticated XSS in Microstrategy Web - Versions prior to 10.1 patch 10

Readme

# CVE-2019-12453
CVE-2019-12453 Stored XSS in MicroStrategy Web prior to 10.1 patch 10

Author: undefinedmode https://github.com/undefinedmode/CVE-2019-12453

In MicroStrategy Web prior to version 10.1 patch 10, stored XSS is possible in the FLTB parameter due to missing input validation. 
The FLTB parameter is used throughout the application.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →