SharePoint Products CopyMove exposes a path traversal flaw that activates when an authenticated user supplies a specially crafted ZIP archive to the import feature. During extraction, malicious entry paths are not constrained, allowing files to be written outside the intended extraction directory.

The flaw affects SharePoint Products:CopyMove for SharePoint 2019 and CopyMove for SharePoint V6. Specific version numbers are not listed, so all builds of these products before the security update are potentially vulnerable.

The CVSS score of 5.0 indicates a moderate risk level. The EPSS score is not available, and the flaw is not listed in the CISA KEV catalog, suggesting it has not yet been actively exploited in the wild. However, access to the ZIP import functionality is required, which is granted only to authenticated users with the necessary permissions. Attacks therefore need to leverage legitimate user credentials and the ability to supply a ZIP file to the import endpoint. Once these prerequisites are met, an attacker can attempt the traversal by including out-of-bounds paths in the archive.