Soaj1664Ashar

تسمح التهيئة غير الآمنة للمتغيرات الافتراضية لمهاجم عن بعد غير مصرح له بتجاوز ميزة أمنية، وتحديداً عملية المصادقة، عبر الشبكة.

The issue arises from the way Microsoft Exchange Outlook Web Access (OWA) handles web requests, allowing an elevation of privilege. This could lead to script or content injection attacks, where an attacker might trick a user into disclosing sensitive information by clicking a maliciously crafted link.

An elevation of privilege issue exists due to Microsoft SharePoint software's failure to properly sanitize specially crafted requests. This issue is related to a cross-site scripting (XSS) vulnerability.

The issue allows remote attackers to perform cross-site scripting and run script with local user privileges via a crafted request.