Firetruck

CVE-2023-29357

KEV · Ransomware
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

Microsoft SharePoint Server contains an unspecified vulnerability that allows an unauthenticated attacker, who has gained access to spoofed JWT authentication tokens, to use them for executing a network attack. This attack bypasses authentication, enabling the attacker to gain administrator privileges.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
Microsoft SharePoint Server 2019Microsoft / Microsoft SharePoint Server 2019>= 16.0.0, < 16.0.10399.20005affected