Microsoft Power Bi Report Server Version 1.12.7977.29537 vulnerabilities

1 known vulnerability affecting microsoft/power_bi_report_server_version_1.12.7977.29537.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2021-41372CRITICALCVSS 9.6≥ 1.0.0.0, < 15.0.1107.1652021-11-10

CVE-2021-41372 [CRITICAL] CWE-79 CVE-2021-41372: A Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) vulnerability exists when Power B A Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) vulnerability exists when Power BI Report Server Template file (pbix) containing HTML files is uploaded to the server and HTML files are accessed directly by the victim. Combining these 2 vulnerabilities together, an attacker is able to upload malicious Power BI templates files to t