Lucene search
+L

1 matches found

Zero Day Initiative
Zero Day Initiative
added 2019/02/12 12:0 a.m.154 views

Microsoft SharePoint EntityInstanceIdEncoder Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft SharePoint. Authentication is required to exploit this vulnerability. The specific flaw exists within the EntityInstanceIdEncoder class. The issue results from the lack of proper validati...

9.8CVSS3.2AI score0.99825EPSS
SaveExploits30References1
Rows per page
Query Builder