The vulnerability of the Microsoft SharePoint Server software, related to deserialization mechanism flaws, allows attackers to execute arbitrary code.

🗓️ 17 Jul 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 5 Views

SharePoint Server deserialization flaw enables remote code execution by loading a crafted file.

Reporter	Title	Published	Views	Family All 27
GithubExploit	Exploit for Deserialization of Untrusted Data in Microsoft	10 Jul 202407:00	–	githubexploit
Information Security Automation	The severity of the Remote Code Execution – Microsoft SharePoint (CVE-2024-38094) vulnerability has increased	27 Oct 202416:24	–	avleonov
Circl	CVE-2024-38024	10 Jul 202409:41	–	circl
CNNVD	Microsoft SharePoint 安全漏洞	9 Jul 202400:00	–	cnnvd
CNVD	Microsoft SharePoint Server Remote Code Execution Vulnerability (CNVD-2024-39672)	12 Jul 202400:00	–	cnvd
CVE	CVE-2024-38024	9 Jul 202417:02	–	cve
Cvelist	CVE-2024-38024 Microsoft SharePoint Server Remote Code Execution Vulnerability	9 Jul 202417:02	–	cvelist
Microsoft KB	Description of the security update for SharePoint Server Subscription Edition: July 9, 2024 (KB5002606)	9 Jul 202407:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Server 2019: July 9, 2024 (KB5002615)	9 Jul 202407:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Enterprise Server 2016: July 9, 2024 (KB5002618)	9 Jul 202407:00	–	mskb

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38024
packetstormsecurity	www.packetstormsecurity.com/files/179460/Microsoft-SharePoint-Remote-Code-Execution.html
web	www.web.nvd.nist.gov/view/vuln/detail

17 Jul 2024 00:00Current

7.7High risk

Vulners AI Score7.7

CVSS 37.2

CVSS 28.3

EPSS0.50835

SharePoint Server deserialization flaw remote code execution crafted file vulnerability