<p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint server farm account.</p>
<p>Exploitation of this vulnerability requires that a user uploads a specially crafted SharePoint application package to an affected version of SharePoint.</p>
<p>The security update addresses the vulnerability by correcting how SharePoint checks the source markup of application packages.</p>
Metrics
Affected Vendors & Products
References
History
Mon, 18 Nov 2024 17:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: microsoft
Published: 2020-09-11T17:09:16
Updated: 2024-11-18T16:24:00.737Z
Reserved: 2019-11-04T00:00:00
Link: CVE-2020-1452
Vulnrichment
Updated: 2024-08-04T06:39:09.750Z
NVD
Status : Modified
Published: 2020-09-11T17:15:20.747
Modified: 2023-12-31T22:16:03.397
Link: CVE-2020-1452
Redhat
No data.