CVE-2019-12475 PoC — Microstrategy Web 跨站脚本漏洞

Source

https://github.com/undefinedmode/CVE-2019-12475

Associated Vulnerability

Title:Microstrategy Web 跨站脚本漏洞 (CVE-2019-12475)
Description:In MicroStrategy Web before 10.4.6, there is stored XSS in metric due to insufficient input validation.

Description

Stored XSS in MicroStrategy Web prior to 10.4.6

Readme

# CVE-2019-12475
Stored XSS in MicroStrategy Web prior to 10.4.6

Author: undefinedmode https://github.com/undefinedmode/CVE-2019-12453

Stored XSS in metric and it is triggered when opening the Visual Threshold editor. Reported to vendor in 2017 and fixed quickly in version 10.4.6.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!