CVE-2023-24955: high-severity vulnerability in Microsoft SharePoint Enterprise Server 2016
Microsoft SharePoint Server Remote Code Execution Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Patch now. It under exploitation confirmed by CISA and has a working public exploit.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
A vulnerability in Microsoft SharePoint Server allows an attacker to execute malicious code remotely on the server. An authenticated user can exploit this flaw to take control of the system and compromise sensitive data.
This CWE-94 (Improper Control of Generation of Code) vulnerability enables remote code execution through SharePoint Server's code generation mechanism. An authenticated attacker can craft malicious input that bypasses validation controls, leading to arbitrary code execution with server privileges and potential lateral movement within the network.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.