PT-2023-1069 · Microsoft · Sharepoint Server+1

·

CVE-2023-21744

·

Publicado

2023-01-10

·

Atualizado

2024-05-29

CVSS v2.0

9.0

Alta

VetorAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server (affected versions not specified) Microsoft SharePoint Foundation (affected versions not specified) Microsoft SharePoint Enterprise Server (affected versions not specified)
Description The issue is related to insufficient input validation in Microsoft SharePoint products, allowing a remote attacker to execute arbitrary code. This can affect the system.
Recommendations For Microsoft SharePoint Server, consider restricting access to sensitive areas of the system until a fix is available. For Microsoft SharePoint Foundation, restrict access to vulnerable modules to minimize the risk of exploitation. For Microsoft SharePoint Enterprise Server, avoid using potentially vulnerable functions until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Deserialization of Untrusted Data

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2023-00202
CVE-2023-21744

Produtos afetados

Sharepoint Server
Sharepoint Foundation