Microsoft SharePoint Server Privilege Escalation Vulnerability via Server-Side Request Forgery

A server-side request forgery (SSRF) vulnerability has been identified in Microsoft Office SharePoint. This vulnerability allows an authorized attacker to elevate privileges over a network. It affects multiple SharePoint products, including SharePoint Server Subscription Edition, SharePoint Server 2019, and SharePoint Enterprise Server 2016.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain the rights of the compromised user.

Remediation

Users can apply the security update corresponding to their SharePoint version. For SharePoint Server Subscription Edition, the update is available as KB5002773. SharePoint Server 2019 users should install KB5002769, and those using SharePoint Enterprise Server 2016 can apply KB5002771.