Cassio Lima

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

External control of file name or path in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

Improper input validation in WebPackaging allows a remote attacker to bypass the web origin policy through the use of crafted network traffic. The web origin policy is a security mechanism that restricts how a document or script loaded from one origin can interact with a resource from another origin.