This vulnerability is a server‑side request forgery flaw that enables an attacker with authorized access to the SharePoint Server Subscription Edition to direct the server to make HTTP requests to arbitrary internal or external hosts. The resulting responses can contain sensitive information, creating a risk of data leakage. The weakness aligns with CWE‑918, representing an SSRF condition.

Affected products are Microsoft SharePoint Server Subscription Edition. No specific version identifiers are supplied, so a full inventory scan of all installed SharePoint instances is recommended.

The CVSS score of 6.5 indicates a moderate level of severity, and the EPSS score is currently unavailable, suggesting limited observable exploitation data. The vulnerability is not listed in CISA’s KEV catalog. Exploitation requires the attacker to be authorized to the SharePoint environment and to be able to influence request construction; it can be mitigated by restricting outbound network traffic from the server and by ensuring only trusted internal destinations are reachable.