Non notée
CVE-2019-1261 A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications,…
Description
A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-site request forgery (CSRF).To exploit this vulnerability, an attacker would need to create a page specifically designed to cause a cross-site request, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-1259.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Microsoft SharePoint Foundation | Versions non publiées | |
| Microsoft SharePoint Enterprise Server | 2016 | Pas de correctif indiqué |
| Microsoft SharePoint Server | 2019 | Pas de correctif indiqué |
Références
- portal.msrc.microsoft.com portal.msrc.microsoft.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Microsoft SharePoint Foundation
Les 65 CVE de Microsoft SharePoint Foundation →
CVE-2020-1444
A remote code execution vulnerability exists in the way Microsoft SharePoint software parses specially crafted email…
Non notée
CVE-2020-1443
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web…
Non notée
CVE-2020-1439
A remote code execution vulnerability exists in PerformancePoint Services for SharePoint Server when the software…
Non notée
CVE-2020-1323
An open redirect vulnerability exists in Microsoft SharePoint that could lead to spoofing.To exploit the…
Non notée