<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint server farm account.</p> <p>Exploitation of this vulnerability requires that a user uploads a specially crafted SharePoint application package to an affected version of SharePoint.</p> <p>The security update addresses the vulnerability by correcting how SharePoint checks the source markup of application packages.</p>
History

Mon, 18 Nov 2024 17:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: microsoft

Published: 2020-09-11T17:09:16

Updated: 2024-11-18T16:24:00.737Z

Reserved: 2019-11-04T00:00:00

Link: CVE-2020-1452

cve-icon Vulnrichment

Updated: 2024-08-04T06:39:09.750Z

cve-icon NVD

Status : Modified

Published: 2020-09-11T17:15:20.747

Modified: 2023-12-31T22:16:03.397

Link: CVE-2020-1452

cve-icon Redhat

No data.