CVE-2020-1523 Microsoft SharePoint Server Tampering Vulnerability

...

CVE-2020-1523

CVE-2020-1523 is a tampering vulnerability in Microsoft SharePoint Server related to how profile data is processed. An authenticated attacker can modify a targeted user’s profile data by sending a specially crafted request to the affected SharePoint Server. The issue is addressed by a security up...

CVE-2020-1523 Microsoft SharePoint Server Tampering Vulnerability

...

Description of the security update for SharePoint Server 2019: September 8, 2020

None None...

SRC-2020-0021 : Microsoft SharePoint Server SPHashtagHelper MakeOLSGetRequest Server-Side Request Forgery Information Disclosure Vulnerability

Vulnerability Details: This vulnerability allows remote attackers disclose information and/or escalate privileges under certain conditions. Authentication is required to exploit this vulnerability. The specific flaw exists within the CallOLS function inside of the SPHashtagStoreManager class. The...