SRC-2021-0016 : Microsoft SharePoint Server InputFormRegularExpressionValidator Denial of Service Vulnerability

🗓️ 11 Jan 2021 00:00:00Reported by Yuhao Weng and Zhiniang Peng of Sangfor and Steven Seeley of Qihoo 360 Vulcan TeamType

srcincite🔗 srcincite.io👁 33 Views

Microsoft SharePoint Server InputFormRegularExpressionValidator Denial of Service Vulnerability. Remote attackers can cause denial of service on affected installations, requiring authentication to exploit. The flaw is within the InputFormRegularExpressionValidator class, lacking proper validation of user-supplied ValidationExpression, allowing a regular expression denial of service

Reporter	Title	Published	Views	Family All 26
CNNVD	Microsoft SharePoint 输入验证错误漏洞	13 Apr 202100:00	–	cnnvd
CNVD	Microsoft SharePoint Denial of Service Vulnerability (CNVD-2021-45273)	14 Apr 202100:00	–	cnvd
CVE	CVE-2021-28450	13 Apr 202119:33	–	cve
Cvelist	CVE-2021-28450 Microsoft SharePoint Denial of Service Vulnerability	13 Apr 202119:33	–	cvelist
EUVD	EUVD-2021-15129	7 Oct 202500:30	–	euvd
Microsoft KB	Description of the security update for SharePoint Enterprise Server 2013: April 13, 2021 (KB4493170)	13 Apr 202107:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Foundation 2010: April 13, 2021 (KB4504709)	13 Apr 202107:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Server 2019: April 13, 2021 (KB4504716)	13 Apr 202107:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Enterprise Server 2016: April 13, 2021 (KB4504719)	13 Apr 202107:00	–	mskb
Kaspersky	KLA12138 Multiple vulnerabilities in Microsoft Office	13 Apr 202100:00	–	kaspersky