CVE-2020-22983

A Server-Side Request Forgery (SSRF) vulnerability exists in MicroStrategy Web SDK 11.1 and...

8.1 High

A Server-Side Request Forgery (SSRF) vulnerability exists in MicroStrategy Web SDK 11.1 and earlier, allows remote unauthenticated attackers to conduct a server-side request forgery (SSRF) attack via the srcURL parameter to the shortURL task.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: None

Exploit likelihood

2.46%Up 1.3 points since May 14, 2022

What each source reports

NVD Score used 8.1

Record: CVE-2020-22983
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CVSS 2.0: 5.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:N
Weakness: CWE-918
Updated: 2026-11-02

CVE List No score

Record: CVE-2020-22983
Updated: 2026-11-02

EUVDEUVD-2020-15739 No score

Record: EUVD-2020-15739
Updated: 2026-11-02

GitHub AdvisoriesGHSA-23r8-p7qp-rwcq 8.1

A Server-Side Request Forgery (SSRF) vulnerability exists in MicroStrategy Web SDK 11.1 and...

Record: GHSA-23r8-p7qp-rwcq
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Weakness: CWE-918
Updated: 2026-11-02

Affected products

microstrategy web

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-22983 is a high vulnerability (CVSS 8.1) in Microstrategy Web, published May 13, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.46%, the 84th percentile. No source names a fixed version.