Aller au contenu
en Se connecter
Non notée

CVE-2020-1023 A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source…

Description

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint server farm account. Exploitation of this vulnerability requires that a user uploads a specially crafted SharePoint application package to an affected version of SharePoint. The security update addresses the vulnerability by correcting how SharePoint checks the source markup of application packages.

Produits et versions touchés

Produit Versions touchées Corrigé en
Microsoft SharePoint Enterprise Server 2016 Pas de correctif indiqué
Microsoft SharePoint Server 2019 Pas de correctif indiqué
Microsoft SharePoint Foundation Versions non publiées
Microsoft SharePoint Enterprise Server 2016 16.0 16.0.0 → dernières Pas de correctif indiqué
Microsoft SharePoint Foundation 2013 Service Pack 1 15.0 15.0.0 → dernières Pas de correctif indiqué
Microsoft SharePoint Server 2019 16.0 16.0.0 → dernières Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Microsoft SharePoint Enterprise Server

Les 91 CVE de Microsoft SharePoint Enterprise Server →
CVE-2020-1456 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a… 5.4 Moyenne CVE-2020-1454 This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an… 5.4 Moyenne CVE-2020-1451 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a… 5.4 Moyenne CVE-2020-1450 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a… 5.4 Moyenne
Suivre cette CVE