Vulnerability · Published May 13, 2022 · Assigned by mitre
CVE-2020-22983
High 8.1
In plain English
A high-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.5% (higher than 85% of all known vulnerabilities).
Severity (CVSS NVD)8.1High
Exploit odds (30 days)2.5%top 15.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A Server-Side Request Forgery (SSRF) vulnerability exists in MicroStrategy Web SDK 11.1 and earlier, allows remote unauthenticated attackers to conduct a server-side request forgery (SSRF) attack via the srcURL parameter to the shortURL task.
Affected products (as reported)
References
- http://www.yourcompany.com:8080/MicroStrategy/servlet/taskProc
- https://tinyurl.com/
- https://www.microstrategy.com/us/report-a-security-vulnerability
- https://medium.com/@win3zz/how-i-made-31500-by-submitting-a-bug-to-facebook-d31bb046e204
- https://medium.com/%40win3zz/how-i-made-31500-by-submitting-a-bug-to-facebook-d31bb046e204 x_refsource_MISC, x_transferred