Microsoft SharePoint Server 远程代码执行漏洞(CVE-2021-28474)

In May of 2021, Microsoft released a patch to correct CVE-2021-28474, a remote code execution bug in supported versions of Microsoft SharePoint Server. This bug was reported to ZDI by an anonymous researcher and is also known as ZDI-21-574. This blog takes a deeper look at the root cause of this...

CVE-2021-28474

Microsoft SharePoint Server Remote Code Execution Vulnerability...

CVE-2021-28474 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2021-28474

CVE-2021-28474 maps to a Microsoft SharePoint Server remote code execution vulnerability. Public details within the provided docs are limited to high‑level descriptions (SharePoint Server RCE) and CVSS metrics; no explicit exploit vectors or affected versions are stated in Connected documents. Th...

Security Updates for Microsoft SharePoint Server 2019 (May 2021)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Microsoft SharePoint Server Remote Code Execution Vulnerability CVE-2021-28474, CVE-2021-31181 - Microsoft SharePoint Information Disclosure...

Security Updates for Microsoft SharePoint Foundation Server 2013 (May 2021)

The Microsoft SharePoint Server 2013 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Microsoft SharePoint Server Remote Code Execution Vulnerability CVE-2021-28474, CVE-2021-31181 - Microsoft SharePoint Information Disclosure...