The vulnerability is a pathname traversal flaw in Microsoft SharePoint. An attacker who is already authenticated to the SharePoint server can construct a request that causes the application to access files outside the intended directory, thereby reading data that should be protected. This weakness is identified as CWE‑22, which means the system fails to properly constrain path references.

The affected product is Microsoft SharePoint Server Subscription Edition. No specific affected versions are listed, so all current installations of the subscription edition should be considered vulnerable until a vendor update is applied.

The CVSS score of 6.5 indicates a moderate severity impact. The EPSS score of 1% indicates a low but non‑zero likelihood of exploitation, and the vulnerability is not listed in the CISA KEV catalog, so the publicly known exploitation likelihood remains uncertain. The likely attack path requires an authorized user to send a crafted request to the SharePoint server, which infers that attackers must first gain legitimate access or exploit a legitimate user session. Once the path traversal is performed, the attacker can read arbitrary files on the server, potentially exposing sensitive configuration, logs, or user data, thereby compromising confidentiality.