CVE-2020-22987

Published: 2022-05-12T20:15Z

Last Modified: 2024-11-21T05:13Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attackers to execute arbitrary code via the fileToUpload parameter to the uploadFile task. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt