Microsoft SharePoint Shared Forms Incomplete Blacklist Remote Code Execution Vulnerability

Vulnerability Details

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft SharePoint. Authentication is required to exploit this vulnerability.

The specific flaw exists within the handling of shared forms. It is possible to invoke a shared form in a way that allows arbitrary controls to be instantiated. An attacker can leverage this vulnerability to execute code in the context of the SharePoint web server process.

Additional Details

Microsoft has issued an update to correct this vulnerability. More details can be found at:
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1102

Disclosure Timeline

• 2020-01-21 - Vulnerability reported to vendor
• 2020-05-12 - Coordinated public release of advisory

Credit

Anonymous

Back to Advisories