CVE-2023-24955
KEV · RansomwareMicrosoft SharePoint Server Code Injection Vulnerability
View CVE record →- Vendor / Project
- Microsoft
- Product
- SharePoint Server
- Date added
- Mar 26, 2024
- Due date
- Apr 16, 2024
- Known ransomware use
- Known
- CWEs
- CWE-94
Description
Microsoft SharePoint Server contains a code injection vulnerability that allows an authenticated attacker with Site Owner privileges to execute code remotely.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.