CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2023-06-14
Microsoft SharePoint Server Elevation of Privilege Vulnerability (CVE-2023-29357) Security Advisory
[Affected Scope] Microsoft SharePoint Server 2019 and SharePoint Server Subscription Edition.
[Impact] An unauthenticated attacker can send a specially crafted JWT token to bypass authentication, gain administrator privileges, and potentially chain it with RCE vulnerabilities.
[Mitigation] Apply the official Microsoft Cumulative Update (CU) immediately and restrict unauthorized access at the network and IIS levels prior to patching.