CVE-2024-38094

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server (affected versions not specified) Microsoft SharePoint Server Subscription Edition (affected versions not specified) Microsoft SharePoint Enterprise Server (affected versions not specified)

Description An issue exists in the deserialization mechanism of Microsoft SharePoint, which allows a remote attacker to execute arbitrary code on the affected system. Real-world incidents have shown that this flaw is actively exploited to gain unauthorized access to corporate networks, install webshells, and move laterally across the network to compromise entire domains and disable security defenses.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.