Description (CNA)
In MicroStrategy Web before 10.1 patch 10, stored XSS is possible in the FLTB parameter due to missing input validation.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.microstrategy.com/producthelp/10.10/Readme/content/web.htm
- https://github.com/undefinedmode/CVE-2019-12453
ADP enrichment
No English description supplied.