CVE-2019-1070

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'...

Microsoft SharePoint Server Cross Site Scripting (CVE-2019-1070)

A cross-site scripting vulnerability exists in Microsoft SharePoint Server. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

CVE-2019-1070

CVE-2019-1070 is an XSS vulnerability affecting Microsoft SharePoint Server. The issue arises because SharePoint Server does not properly sanitize specially crafted web requests, enabling an attacker to execute scripts in the context of the current user after authentication. The published details...