TI-2021-18191 CVE-2021-41372 · GHSA-3w9m-7j3j-w9p6
Power BI Report Server Spoofing Vulnerability
Priority MEDIUM 42
A Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) vulnerability exists when Power BI Report Server Template file (pbix) containing HTML files is uploaded to the server and HTML files are accessed directl…