Lucene search
+L

1 matches found

Zero Day Initiative
Zero Day Initiative
added 2019/02/12 12:00 a.m.156 views

Microsoft SharePoint EntityInstanceIdEncoder Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft SharePoint. Authentication is required to exploit this vulnerability. The specific flaw exists within the EntityInstanceIdEncoder class. The issue results from the lack of proper validati...

9.8CVSS3.2AI score0.99913EPSS
SaveExploits30References1
Rows per page
Query Builder