VDB

BDU%3A2024-03880

BDU%3A2024-03880 PUBLISHED CVSS 6.5 MEDIUM

Уязвимость пакетов программ Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, Microsoft SharePoint Enterprise Server, связанная с неверным ограничением XML-ссылок на внешние объекты, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

Risk Scores

CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Affected Products

VendorProductVersions
Microsoft CorpMicrosoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition
MicrosoftMicrosoft SharePoint Server 201916.0.0
MicrosoftMicrosoft SharePoint Server Subscription Edition16.0.0
MicrosoftMicrosoft SharePoint Enterprise Server 201616.0.0
microsoftsharepoint_server16.0.0, 16.0.0, 16.0.0

Timeline

  • May 14, 2024 CVE Published
  • May 20, 2024 CVE Updated
  • May 31, 2024 PoC Published
  • May 31, 2024 PoC Published
  • May 31, 2024 PoC Published
  • Jun 10, 2024 PoC Published
  • Jun 28, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›