Security Advisory

CVE-2020-11451

7.2
HIGH

Vulnerability Description

The Upload Visualization plugin in the Microstrategy Web 10.4 admin panel allows an administrator to upload a ZIP archive containing files with arbitrary extensions and data. (This is also exploitable via SSRF). Note: The ability to upload visualization plugins requires administrator privileges.
Published Date April 2, 2020
Official Source NIST NVD Advisory