This vulnerability is a server‑side request forgery that lets an authorized user trigger internal network requests from SharePoint, thereby enabling an elevation of privilege attack chain. The flaw is a classic example of CWE‑918, allowing the attacker to manipulate outbound requests to gain higher level access within the network. If leveraged, an attacker could gain unauthorized access to sensitive data or resources and potentially modify or delete critical information. The impact is essentially a privilege escalation that expands an attacker’s reach in the environment.

The affected product is Microsoft SharePoint Server Subscription Edition. No specific version numbers are listed, so any deployment of this edition should be treated as at risk until a patch is applied.

The CVSS score of 7.5 indicates a high severity of the flaw. No EPSS score is available, so the attack probability cannot be quantified, but the vulnerability is not currently listed in the CISA KEV catalog. The likely attack vector is within an authorized user’s session, using malformed input to direct the SharePoint server to make privileged internal requests—the SSRF mechanism requires that the user already have some level of authentication and permission to interact with the server. In such a context, the flaw can be abused to bypass normal access controls and elevate privileges over the network.